vania-janet/multiturn-rag-retrieval-data huggingface dataset:
For details, see [Key-protect COS Integration](https://cloud.ibm.com/docs/key-protect?topic=key-protect-integrate-cos).
* Is there additional encryption processing if a customer wants to encrypt their data?

Server-side encryption is always on for customer data. Compared to the hashing required in S3 authentication and the erasure coding, encryption is not a significant part of the processing cost of Object Storage.
* Does Object Storage encrypt all data?

Yes, Object Storage encrypts all data.
* Does Object Storage have FIPS 140-2 compliance for the encryption algorithms?

Yes, the IBM COS Federal offering is approved for FedRAMP Moderate Security controls, which require a validated FIPS configuration. IBM COS Federal is certified at FIPS 140-2 level 1. For more information on COS Federal offering, [contact us](https://www.ibm.com/cloud/government) via our Federal site.
* Is client-key encryption supported?

Yes, client-key encryption is supported by using SSE-C, Key Protect, or HPCS.
* What is the difference between a Standard and One Rate plan?



* Standard plan is our most popular public Cloud pricing plan, that meets the requirements of majority of the enterprise workloads. The Standard plan is best suited for workloads that have large amount of storage and relatively small Outbound bandwidth (Outbound bandwidth < 20% of Storage capacity). The plan offers flexible choices for storage class based on data access patterns (lower the cost, the less frequently data is accessed). The Standard plan bills for every stored capacity ($/GB/month), Outbound bandwidth ($/GB), class A ($/1,000), class B ($/10,000) and retrieval ($/GB) metrics, where applicable.
* One Rate plan is suited for active workloads with large amounts of Outbound bandwidth (or varying Outbound bandwidth) as a percent of their Storage capacity (Outbound bandwidth > 20% of Storage capacity). Typical workloads belong to large enterprises and ISVs which may have sub-accounts with multiple divisions/departments or end-users.
Using service endpoints to privately connect to Event Notifications 

To ensure that you have enhanced control and security over your data when you use Event Notifications, you have the option of using private routes to IBM Cloud® service endpoints. Private routes are not accessible or reachable over the internet. By using the IBM Cloud private service endpoints feature, you can protect your data from threats from the public network and logically extend your private network.



 Before you begin 

You must first enable virtual routing and forwarding in your account, and then you can enable the use of IBM Cloud private service endpoints. For more information about setting up your account to support the private connectivity option, see [Enabling VRF and service endpoints](https://cloud.ibm.com/docs/account?topic=account-vrf-service-endpoint).

Keep in mind the following considerations:



* You can select a service endpoint option for a Event Notifications instance only at its creation.
* The Event Notifications service UI is not accessible for Private only instances.







 Setting up private endpoints for Event Notifications in the UI 

After your account is enabled for VRF and service endpoints, you can provision a Event Notifications service instance to connect over a private service endpoint.



1. In the IBM Cloud console, go to the [Event Notifications offering details page](https://cloud.ibm.com/catalog/services/event-notifications).
2. In the Create tab, select the location that represents the geographic area (Region) where you want to provision your instance. Currently, Dallas (us-south), London (eu-gb), Frankfurt (eu-de), and Sydney (au-syd) region is supported.
3. Select a pricing plan - Based on your business requirements, select a pricing plan: Lite, and Standard.
4. Configure your resource by providing a Service name for your instance, or use the preset name.
5. Select a resource group - The resource group selection helps how you want resources to be organized in your account. The resource group that you select cannot be changed after the service instance is created.
6.
* There is no extra charge for an alias, but each alias counts against your quota in your Cloud Foundry organization.
* You can create only one alias per Cloud Foundry space in the IBM Cloud console. However, more than one alias per space can be created using the IBM Cloud CLI. For more information, see [Working with resource groups and resources](https://cloud.ibm.com/docs/cli?topic=cli-ibmcloud_commands_resource).
* You can create multiple connections between your IAM-managed service and any Cloud Foundry app in any space, organization, and region in the same account if you have permission.
* Multiple connections made in the same space to different Cloud Foundry apps from an IAM-managed service instance will use the same alias.
* Un-binding an IAM-managed service instance will not delete the Cloud Foundry service instance that represents the alias.
* Deleting the Cloud Foundry app that your IAM-managed service instance is connected to will not delete the Cloud Foundry instance that represents the alias.
* Deleting an IAM-managed service instance will delete the Cloud Foundry service instance that represents the alias.







 Creating a connection (alias) between an IAM-managed service and a Cloud Foundry app 

To connect your IAM-managed service instance to a Cloud Foundry app:



1. Go to your dashboard.
2. Click the name of your app to open the app details view.
3. Click Connect existing and choose from your existing Cloud Foundry app. Or click Create Connection to create a Cloud Foundry app to connect to.
4. Specify the Access Role for Connection. This value sets the IAM service access role. For more information, see [IAM access](https://cloud.ibm.com/docs/account?topic=account-userrolesservice_access_roles).
5. Optionally, you can provide a Service ID for Connection by either allowing IAM to generate a unique value for you, or by providing an existing service ID. For more information, see [Creating and working with service IDs](https://cloud.ibm.com/docs/account?topic=account-serviceids).
Detailed pricing scenarios 

This topic includes additional detailed pricing and sizing scenarios to help you learn more about the potential costs of various IBM® Blockchain Platform for IBM Cloud network configurations.

Target audience: This advanced topic is designed for architects and system administrators who are responsible for planning and sizing the cost of an IBM Blockchain Platform network on IBM Cloud.

The costs that are provided in this topic are based on the usage of IBM Cloud Kubernetes service clusters. The costs are guidelines and do not represent actual costs. They represent a starting point for estimates of costs that would be incurred in environments with a similar configuration. Actual costs can vary by geography. The prices reflected here are based on the resources required by Fabric v1.4 peer images and actual prices as of October 16, 2019. It is possible the prices can change. The performance of your configuration depends on your smart contracts and the queries you are running. To determine your actual costs, it is important that you test the configuration to verify that the performance satisfies your requirements.

If you need to first learn more about the basic elements that factor into the cost a blockchain network, review the topic on [Pricing for IBM Blockchain Platform for IBM Cloud](https://cloud.ibm.com/docs/blockchain?topic=blockchain-ibp-saas-pricing).



 Scenario comparisons 

The following table includes configuration and cost information for three types of environments:



* Functional Test/Demo
* Pilot
* Production or Pre-Production



Click a tab to view the details for a configuration. Each tab contains two options:



* Cost to host This column represents the cost to host a blockchain network, therefore the configuration includes an ordering service, CAs, and peers.
* Cost to join This column represents the cost to join an existing blockchain network by contributing peers or an new organization with peers to the network. This configuration includes only CA and peer nodes.



For example, consider the scenario where a group of organizations want to transact on a blockchain network. The network might include buyers, suppliers, distributors, and banks. If you are hosting a network, you could host the ordering service and some organizations such as the buyers, and suppliers.
Adding services by using managed add-ons 

Managed IBM Cloud Kubernetes Service add-ons are an easy way to enhance your cluster with extra capabilities and open-source capabilities, such as Istio, the Diagnostics and Debug Tool, Block Storage for VPC, or the Cluster Autoscaler. The version of the driver, plug-in, or open-source tool that you add to your cluster is tested by IBM and approved to be used in IBM Cloud Kubernetes Service.

The managed add-ons that you can install in your cluster depend on the type of cluster, the container platform, and the infrastructure provider that you choose.

Support
: Managed add-ons are fully integrated into the IBM Cloud support organization. If you have a question or an issue with using the managed add-ons, you can use one of the IBM Cloud Kubernetes Service support channels. For more information, see [Getting help and support](https://cloud.ibm.com/docs/containers?topic=containers-get-help).

Billing
: If the tool that you add to your cluster incurs costs, these costs are automatically integrated and listed as part of your IBM Cloud Kubernetes Service billing. The billing cycle is determined by IBM Cloud depending on when you enabled the add-on in your cluster.
: In general, no additional setup, such as opening ports or IP addresses is required. However, refer to the documentation of each managed add-on to find the prerequisites that your cluster must meet before you install the managed add-on.



 Adding managed add-ons 

To enable a managed add-on in your cluster from the CLI, use the [ibmcloud ks cluster addon enable command](https://cloud.ibm.com/docs/containers?topic=containers-kubernetes-service-clics_cluster_addon_enable). To enable a managed add-on in your cluster in the [Kubernetes clusters console](https://cloud.ibm.com/kubernetes/clusters), use the Add-ons pane of the cluster details page.
But just like first-party software you might develop and deploy, self-installed third-party software must comply with all of the requirements of the IBM Cloud Framework for Financial Services. And, it is your responsibility to provide appropriate supporting evidence.

For more information, see [Ensure all usage of software meets IBM Cloud Framework for Financial Services controls](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-best-practicesbest-practices-self-installed-software).



Landing zone



* What is a deployable architecture?

A deployable architecture is a combination of capabilities from one or more technologies that solve a customer-defined problem, and it can have one or more reference architectures based on the customer business needs. For more about deployable architectures, read about [infrastructure architectures](https://cloud.ibm.com/docs/overview?topic=overview-secure-enterprisedefine-architecture) in "Running secure enterprise workloads on IBM Cloud".
* What is infrastructure as code?

Infrastructure as code (IaC) is code to manage and provision infrastructure (for example, networks, virtual machines, load-balancers, clusters, services and connection topology) in a descriptive model rather than a by using manual processes.

With IaC, code defines your infrastructure, specifying your resources and their configuration. Your infrastructure code is treated the same as app code so that you can apply DevOps core practices such as version control, testing, and continuous monitoring. The VPC landing zone deployable architectures use [Terraform](https://www.terraform.io/) to specify the infrastructure and [IBM Cloud Schematics](https://cloud.ibm.com/docs/schematics?topic=schematics-getting-started) to manage the deployment.
* How do I estimate costs?

You can view and estimate of starting costs for a variation of the deployable architecture from the IBM Cloud catalog details page. When you deploy by using IBM Cloud® projects, the starting costs for the project are estimated from the validation window after your changes to the configuration are saved and validated.
* Are new releases compatible with previous ones?

Changes adhere to semantic versioning, with releases labeled as {major}.
According to [the IBM Cloud Services Agreement](https://www.ibm.com/support/customer/csol/terms/?id=Z126-6304&cc=us&lc=endetail-document), we are required to provide our customers with a 30-day notice of any price changes. After you submit your support case, you must email the onboarding specailists at [cloud.onboarding@ibm.com](mailto:cloud.onboarding@ibm.com) to help draft this notification. Client notifications will be sent out on the first of the following month. After your notification has been sent, your updated pricing will go into effect on the first of the following month.

You can track the progress of your submitted case from the [Manage cases page](https://cloud.ibm.com/unifiedsupport/cases).

For the best support experience on IBM Cloud, we recommend that you have an [advanced or premium support plan](https://cloud.ibm.com/docs/get-support?topic=get-support-support-plans).
* [Red Hat® OpenShift® on IBM Cloud®](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-detailed-openshift)



* [IBM Cloud Satellite® reference architecture](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-about)
* [IBM Cloud® for VMware® Regulated Workloads reference architecture](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vmware-overview)



In addition, prescriptive [deployment and configuration guidance](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-deployment-setup-environment) is provided for the components in each of these reference architectures. The guidance is intended as an easier to consume supplement to the CIO templates that is more appropriate for architects and developers trying to build and implement applications for IBM Cloud for Financial Services.









 Becoming IBM Cloud for Financial Services Validated 

IBM Cloud for Financial Services Validated designates that an IBM Cloud service or ecosystem partner service has evidenced compliance to the controls of the IBM Cloud Framework for Financial Services and can be used to build solutions that might themselves be validated. Ecosystem partners who are interested in being IBM Cloud for Financial Services Validated are required to complete a CIO template for evaluation by IBM and to comply with the requirements of the IBM Cloud Framework for Financial Services.

Through the shared responsibility model of the IBM Cloud Framework for Financial Services and the surrounding standardized processes, financial institutions and ecosystem partners get benefits such as:



* Less time that is spent by ecosystem partners demonstrating compliance and more time delivering innovative services.
* Reduction in the time and effort by financial institutions to ensure the compliance of third-party vendors, and more time spent delivering new, innovative services to their customers.
* Streamlined procurement, contracting, and onboarding within the ecosystem that leads to reduced time to market for all parties.
For more information, see [Pricing for Code Engine](https://cloud.ibm.com/docs/codeengine?topic=codeengine-pricing).





 Can I route requests to a specific application instance? 

No, this functionality is not currently supported. You can approximate this functionality by using [Knative traffic splitting](https://knative.dev/docs/getting-started/first-traffic-split/). For more information about using Knative with Code Engine, see [Using Knative with Code Engine](https://cloud.ibm.com/docs/codeengine?topic=codeengine-knative).





 I use a global load balancer with my Cloud Foundry app. Can I migrate it to Code Engine? 

Yes, you can update your global load balancer to point to your Code Engine app, if you can access the certificate chain and the corresponding private key. The following steps assume that you are using Cloud Internet Services (CIS) (CIS); however, you can adapt these steps for your own global load balancer.

These steps use the console.



1. Create a domain mapping for your app. When you create your domain mapping, provide your private key and the full certificate chain of the domain(s). For more information, see [Configuring custom domain mappings for your app](https://cloud.ibm.com/docs/codeengine?topic=codeengine-domain-mappings). Wait until the domain mappings in all projects are showing a Ready state.
2. Open the details of each domain mapping and record the CNAME value, for example, custom.<your-random-id>.us-south.codeengine.appdomain.cloud or custom.<your-other-random-id>.us-east.codeengine.appdomain.cloud.
3. Navigate to the details page for each application and select Domain mappings tab and then, select No external system domain mapping in the system domain mappings section. This step ensures that your applications are only accessible through the custom domains when called from outside of this project.
4.
Deploying quick start templates 

IBM Cloud® Functions offers a catalog of templates to help you get started on your next project. Templates are a combination of actions, triggers, sequences. Some templates also incorporate other services from IBM Cloud. By using these templates, you can understand how IBM Cloud® Functions entities work together and even use these entities as a basis for your own project.



 Available quick start templates 

The following quick start templates are available for deployment. You can deploy the templates as is, or you can access the code for each template in its code repository, modify it as you like, and then create your own function.



Table 1. Templates, descriptions, and supported runtimes available in IBM Cloud Functions

 Name Description Supported Runtimes Source repository 

 [IBM Cloudant Events](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-templatescloudant-template) When a document is edited or added in an IBM® Cloudant® for IBM Cloud® database, log the change in the console. <br><br> * Node.js 10<br> * Node.js 12<br> * Python 3<br> * PHP 7<br><br><br> [Code](https://github.com/ibm-functions/template-cloudant-trigger) 
 [Get HTTP Resource](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-templatesget-http-resource-template) Invoke a web action by using an HTTP event. <br><br> * Node.js 10<br> * Node.js 12<br> * Python 3<br><br><br> [Code](https://github.com/ibm-functions/template-get-external-resource) 
 [Hello World](https://cloud.ibm.com/docs/openwhisk?topic=openwhisk-templateshello-world-template) Create a basic action that accepts a JSON object as a single parameter.
Also, with a Pay-As-You-Go account, you can order Advanced or Premium support plans to get extra help with your production workloads. Learn more in [Basic, Advanced, and Premium Support plans](https://cloud.ibm.com/docs/get-support?topic=get-support-support-plans).

A subset of Pay-As-You-Go accounts are eligible for the new Enterprise Savings Plan billing model. For more information, see [Enterprise Savings Plan billing model](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-committed-use).





 Subscription account 

Subscription accounts offer many of the same benefits as Pay-As-You-Go accounts, including access to the full IBM Cloud catalog and the ability to create multiple resource groups. In addition, Subscription accounts provide discounts for platform services and support and more consistent billing through subscriptions. You can also [set up spending notifications](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-spending) to get notified when your account or a particular service reaches a specific spending threshold that you set.

When you purchase a subscription, you commit to a minimum spending amount for a certain period of time and receive a discount on the overall cost. For example, if you commit to spend $1,000 a month for 6 months, you might get a 5% discount. For the duration of the subscription, you get $6,000 of usage but pay only $5,700 for it. The larger the subscription, the better the discount.

Large organizations and other users with large cloud workloads can benefit from the savings and predictable billing that are provided by subscriptions. IBM Cloud offers multiple types of subscriptions to fit your usage needs.

A subset of subscription accounts are eligible for the new Enterprise Savings Plan billing model. For more information, see [Enterprise Savings Plan billing model](https://cloud.ibm.com/docs/account?topic=account-accountscommitment-model).



 Platform subscriptions
View the [Notices file](https://cloud.ibm.com/media/docs/downloads/oss-licensing-info/IBMCloud-DeveloperConsole-OSS-Licenses.txt) for the IBM Cloud Developer Console.

This section consists of the following:



* AGPL v3
* CC-BY-2.5
* CC-BY-3.0
* CC-BY-4.0
* CC-BY-SA-1.0
* Creative Commons Attribution Share-Alike 2.0
* Creative Commons Attribution Share-Alike 2.5
* Creative Commons Attribution Share-Alike 4.0
* General Public License V2
* General Public License V3
* GNU FREE DOCUMENTATION LICENSE V1.3
* RHEL Universal Base Image
* SIL OFL 1.1
* Unique





 GNU AFFERO GENERAL PUBLIC LICENSE, VERSION 3 

The Program includes some or all of the following licensed to you as Separately Licensed Code under the GNU Affero General Public License. For copies of the source code for this software, send an email to [devlic@us.ibm.com](mailto:devlic@us.ibm.com) identifying the IBM product and the AGPL-licensed program for which you are requesting the source code.

GOLANGCI-LINT





 Creative Commons Attribution 2.5 license 

The Program includes some or all of the following that IBM obtained under the Creative Commons Attribute 2.5 License:
See [View your usage](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-viewingusageviewingusage) and [Set spending notifications](https://cloud.ibm.com/docs/billing-usage?topic=billing-usage-spending) for general IBM Cloud account guidance.





 What are the terms of the service level agreement? 

See the [IBM Cloud terms of service](https://cloud.ibm.com/docs/overview?topic=overview-slas) and the [Satellite additional service description](http://www.ibm.com/software/sla/sladb.nsf/sla/bm-8913-01).

Satellite Infrastructure Service is IBM-operated and as such, is covered in the IBM Cloud Satellite cloud service terms with additional information outlined in the [IBM Cloud Additional Services Description](http://www.ibm.com/support/customer/csol/terms/?id=i126-8979).





 What compliance standards does the service meet? 

IBM Cloud is built by following many data, finance, health, insurance, privacy, security, technology, and other international compliance standards. For more information, see [IBM Cloud compliance](https://cloud.ibm.com/docs/overview?topic=overview-compliance).

To view detailed system requirements, you can run a [software product compatibility report for IBM Cloud Satellite](https://www.ibm.com/software/reports/compatibility/clarity/softwareReqsForProduct.html).

Note that compliance also might depend on the setup of the underlying infrastructure provider that you use for the Satellite location control plane and other resources.

IBM Cloud Satellite implements controls commensurate with the following security standards:



* International Organization for Standardization (ISO 27001, ISO 27017, ISO 27018)







 What IBM Cloud services can I use with Satellite? 

For a complete list of IBM Cloud services that you can deploy to your Satellite location, see Satellite-enabled IBM Cloud services.

Keep in mind that each service might:



* Be available for Satellite locations that are managed from select IBM Cloud regions only, such as from Washington, DC or London.