vania-janet/multiturn-rag-retrieval-data huggingface dataset:
Run the following command: [ibmcloud login](https://cloud.ibm.com/docs/cli?topic=cli-ibmcloud_cliibmcloud_login)
3. Set the resource group where the instance is running. Run the following command: [ibmcloud target](https://cloud.ibm.com/docs/cli?topic=cli-ibmcloud_cliibmcloud_target)

By default, the default resource group is set.
4. Get the instance name. Run the following command: [ibmcloud resource service-instances](https://cloud.ibm.com/docs/cli?topic=cli-ibmcloud_commands_resourceibmcloud_resource_service_instances)

ibmcloud resource service-instances
5. Get the name of the API key that is associated with the instance. Run the [ibmcloud resource service-keys](https://cloud.ibm.com/docs/cli?topic=cli-ibmcloud_commands_resourceibmcloud_resource_service_keys) command:

ibmcloud resource service-keys --instance-name INSTANCE_NAME --output JSON

where INSTANCE_NAME is the name of the instance that you obtained in the previous step.

The output from this command includes the field Sysdig Access Key that contains the access key for the instance.







 Creating an access key 

If the access key is compromised or you have a policy to renew it after a number of days, you can generate a new access key and disable the old one.

To create a new access key for an IBM Cloud Security and Compliance Center Workload Protection instance, complete the following steps:



1. Obtain the Workload Protection API token from the IBM Cloud Security and Compliance Center Workload Protection UI. [Learn more](https://cloud.ibm.com/docs/workload-protection?topic=workload-protection-api_tokenapi_token_get).
2. Issue a curl POST request against the endpoint to generate a new access key.
Backup services 



  IBM Cloud Backup 

IBM Cloud® Backup for Classic is an automated agent-based backup system that is managed through the IBM Cloud Backup for Classic WebCC browser-based management utility, providing users with a method to back up data between servers in one or more data centers on the IBM Cloud® network. Administrators can set backups to follow an hourly, daily, weekly, or custom schedule that targets full systems, specific directories, or even individual files. Extra plug-ins allow for compatibility with software like MS Exchange and MS SQL, and other types of third-party software to perform a Bare Metal Restore, when necessary.

For more information about IBM Cloud Backup for Classic services, see [Getting Started with IBM Cloud Backup for Classic services](https://cloud.ibm.com/docs/Backup?topic=Backup-getting-started).





  R1Soft Continuous Data Protection 

Continuous Data Protection is a high-performance backup software from R1Soft that is used for backup of both physical and virtual devices. Continuous Data Protection consists of three main components: the R1Soft server, the agent, and the database plug-ins, which are available for purchase separately from the first two components. Because R1Soft Continuous Data Protection is a third-party backup solution, interactions with Continuous Data Protection take place entirely outside of IBM Cloud® proprietary interfaces. However, R1Soft Continuous Data Protection passwords can be tracked and stored within IBM Cloud console. All other interactions with R1Soft Continuous Data Protection are documented on the R1Soft website.

For more information about R1Soft Continuous Data Protection backup services, see [R1Soft Documentation](http://wiki.r1soft.com/display/ServerBackupManager/Home).
It is compatible with Microsoft software including Exchange and SQL through extra plug-ins. IBM Cloud Backup for Classic users interact with this service through IBM Cloud Backup for Classic’s WebCC web-based application. For more information, see [Getting started with IBM Cloud Backup for Classic services](https://cloud.ibm.com/docs/Backup?topic=Backup-getting-started).
* R1Soft Continuous Data Protection is backup software that can be installed on your server or self-managed virtual machine. It is recommended if you want a single interface to manage all of your backups. You interact with R1Soft CDP through your proprietary management system, which allows agents to be installed on virtual machines and offers database plug-ins for extra functions. For more information about R1Soft CDP back-up services, see the [R1Soft Documentation](http://wiki.r1soft.com/display/ServerBackupManager/Home).







 Next steps 

After your virtual server is configured, you can start managing it. For more information, see [Managing your virtual server](https://cloud.ibm.com/docs/virtual-servers?topic=virtual-servers-managing-virtual-serversmanaging-virtual-servers).
* [SAP Note 2927211 - SAP Applications on IBM Cloud Virtual Private Cloud (VPC) Infrastructure environment](https://launchpad.support.sap.com//notes/2927211)
* [SAP Note 2588225 - SAP on IBM Cloud: Protect against speculative execution vulnerabilities](https://launchpad.support.sap.com//notes/2588225)
* [SAP Note 1380654 - SAP support in IaaS environments](https://launchpad.support.sap.com//notes/1380654)
* [SAP Note 2414097 - SAP Applications on IBM Cloud Classic Infrastructure environment](https://launchpad.support.sap.com//notes/2414097)
* [Next-generation languages and models](https://cloud.ibm.com/docs/speech-to-text?topic=speech-to-text-models-ng)
* [Low latency](https://cloud.ibm.com/docs/speech-to-text?topic=speech-to-text-interimlow-latency)



New beta character_insertion_bias parameter for next-generation models
: All next-generation models now support a new beta parameter, character_insertion_bias, which is available with all speech recognition interfaces. By default, the service is optimized for each individual model to balance its recognition of candidate strings of different lengths. The model-specific bias is equivalent to 0.0. Each model's default bias is sufficient for most speech recognition requests.

However, certain use cases might benefit from favoring hypotheses with shorter or longer strings of characters. The parameter accepts values between -1.0 and 1.0 that represent a change from a model's default. Negative values instruct the service to favor shorter strings of characters. Positive values direct the service to favor longer strings of characters. For more information, see [Character insertion bias](https://cloud.ibm.com/docs/speech-to-text?topic=speech-to-text-parsinginsertion-bias).

The Speech services do not support the OADP backup and restore utility
: Watson Speech services do not support the IBM Cloud Pak for Data OpenShift APIs for Data Protection (OADP) backup and restore utility. If the Speech services are installed on a cluster, you might not be able to use the IBM Cloud Pak for Data OADP backup and restore utility to back up other services that are installed on that cluster. This limitation applies to version 4.0.0 and later versions of the Speech services.

Security vulnerabilities addressed
: The following security vulnerabilities have been fixed:
Hotlink Protection class 

The SoftLayer_Network_CdnMarketplace_Configuration_Behavior_HotlinkProtection class contains the attributes that are used by our Hotlink Protection APIs. This object is used to set the Hotlink Protection behavior for a CDN by calling the API. It is also returned by Hotlink Protection APIs after a successful API call.

classSoftLayer_Network_CdnMarketplace_Configuration_Behavior_HotlinkProtection:



* :// in the first label of the URL is not supported.



* Valid: httpwww.example.com
* Invalid: http://www.example.com



* protectionType: specifies to allow or deny access to content when an HTTP request has a Referer Header value matching one of the terms in refererValues. The opposite occurs when there is no match.

Possible value for protectionType:



* ALLOW
* DENY



* refererValues: is a single-space-separated list of referer URLs, which might also have wildcard matching, in the form of a string.

Some examples of a valid string for refererValues:



* alternate-domain.example.com
* www1.example.com www2.example.com www3.example.com
* www.example.com www.example.com/ www.example.com/path
* .example.com
* www.example.
* .example.com .example.net
* httpswww.example.com



Some examples of an invalid string for refererValues:



 Description of invalid example Example 

 Contains more than 2100 characters, total www1.example.com www2.example.com www3.example.com www4.example.com www5.example.com... 
 Contains at least one URL match term that has greater than 255 characters www1.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.example.com www.example.org
Creates a new Hotlink Protection, and returns the newly created behavior.



* Parameters: A collection of type SoftLayer_Container_Network_CdnMarketplace_Configuration_Input. You can view all of the attributes in the Input container here:

[Input container](https://cloud.ibm.com/docs/CDN?topic=CDN-input-container)

The following attributes are part of the Input container and are required when creating a new Hotlink Protection:



* uniqueId - Provide the unique ID of the mapping to which to assign the behavior.
* protectionType - Specifies whether to "ALLOW" or "DENY" access to your content when a webpage makes a request for content with a Referer header value matching one of the terms in the specified referer values.
* refererValues - A single-space-separated list of Referer URL match terms for which the protectionType behavior takes effect.



See the [SoftLayer_Network_CdnMarketplace_Configuration_Behavior_HotlinkProtection](https://cloud.ibm.com/docs/CDN?topic=CDN-hotlink-protection-class) page to see a list of valid Hotlink Protection values.
* Returns - An object of type SoftLayer_Network_CdnMarketplace_Configuration_Behavior_HotlinkProtection.

[Hotlink Protection class](https://cloud.ibm.com/docs/CDN?topic=CDN-hotlink-protection-class)



--------------------





 updateHotlinkProtection 

Updates an existing Hotlink Protection behavior for an existing domain mapping and returns the updated behavior.



* Parameters: A collection of type SoftLayer_Container_Network_CdnMarketplace_Configuration_Input. You can view all of the attributes in the Input container here:

[Input container](https://cloud.ibm.com/docs/CDN?topic=CDN-input-container)

The following attributes are part of the Input container and are required when updating an existing Hotlink Protection:



* uniqueId - The unique ID of the mapping to which the existing behavior belongs.
This document is referenced by:



* [SAP Note 2927211 - SAP Applications on IBM Cloud Virtual Private Cloud (VPC) Infrastructure environment](https://launchpad.support.sap.com//notes/2927211)
* [SAP Note 2588225 - SAP on IBM Cloud: Protect against speculative execution vulnerabilities](https://launchpad.support.sap.com//notes/2588225)
* [SAP Note 1380654 - SAP support in IaaS environments](https://launchpad.support.sap.com//notes/1380654)
* [SAP Note 2414097 - SAP Applications on IBM Cloud Classic Infrastructure environment](https://launchpad.support.sap.com//notes/2414097)
* Parameters: A collection of type SoftLayer_Container_Network_CdnMarketplace_Configuration_Input. You can view all of the attributes in the Input container here:

[Input container](https://cloud.ibm.com/docs/CDN?topic=CDN-input-container)

The following attributes are part of the Input container and are required when updating an existing Hotlink Protection:



* uniqueId - The unique ID of the mapping to which the existing behavior belongs.
* protectionType - Specifies whether to "ALLOW" or "DENY" access to your content when a webpage makes a request for content with a Referer header value matching one of the terms in the specified refererValues.
* refererValues - A single-space-separated list of Referer URL match terms for which the protectionType behavior takes effect.



See the [SoftLayer_Network_CdnMarketplace_Configuration_Behavior_HotlinkProtection](https://cloud.ibm.com/docs/CDN?topic=CDN-hotlink-protection-class) page to see a list of valid Hotlink Protection values.
* Returns - An object of type SoftLayer_Network_CdnMarketplace_Configuration_Behavior_HotlinkProtection.

[Hotlink Protection class](https://cloud.ibm.com/docs/CDN?topic=CDN-hotlink-protection-class)



--------------------





 deleteHotlinkProtection 

Removes an existing Hotlink Protection behavior from an existing domain mapping.



* Parameters: A collection of type SoftLayer_Container_Network_CdnMarketplace_Configuration_Input. You can view all of the attributes in the Input container here:

[Input container](https://cloud.ibm.com/docs/CDN?topic=CDN-input-container)

The following attributes are part of the Input container and are required when creating a new Hotlink Protection:



* uniqueId - Provide the unique ID of the mapping from which to remove the behavior.



* Returns - null
As a user of Hyper Protect Crypto Services, you get your own dedicated slot that you set up on your own to ensure that no body else can access. Because Hyper Protect Crypto Services and VMware do not contact the same interfaces, the Key Management Interoperability Protocol for VMware component acts as an intermediary to allow the VMware environment to store and use keys from Hyper Protect Crypto Services.

As a single-tenant service, Hyper Protect Crypto Services offers dedicated control of the Hardware Security Module for VMware images for each customer. Hyper Protect Crypto Services extends the family of key management services in the IBM Cloud toward single-tenant instances with dedicated hardware secret control.

Check out the [overview video on IBM Cloud Hyper Protect Crypto Services and VMware on IBM Cloud solutions](https://mediacenter.ibm.com/id/0_4wm4bq4s) for more information. For a step-to-step tutorial, see [Configuring KMIP in Hyper Protect Crypto Services for key management and distribution](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-tutorial-kmip-vmware) and the [demo video](https://mediacenter.ibm.com/media/1_e5gk6ktn).

Zoom

![VMware image protection and vSAN encryption with KYOK](https://cloud.ibm.com/docs-content/v1/content/217f108cc44e2ce15fb692d4b57b4c628464e908/hs-crypto//images/byok-vm.svg)

Figure 2. VMware image protection with KYOK







 Using Hyper Protect Crypto Services as PKCS 11 HSMs 

IBM Cloud Hyper Protect Crypto Services provides the

[PKCS #11 API](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-pkcs11-api-ref). PKCS #11 is defined as one of the Public-Key Cryptography Standards.
Getting started with IBM Cloud Security and Compliance Center Workload Protection 

In architectures that are focused on container and microservices, you can use IBM Cloud® Security and Compliance Center Workload Protection to find and prioritize software vulnerabilities, detect and respond to threats, and manage configurations, permissions, and compliance from source to run.



 Before you begin 



* You must have a user ID that is a member or an owner of an IBM Cloud account. To get an IBM Cloud user ID, go to: [Registration](https://cloud.ibm.com/login).
* Check the regions where the service is available. [Learn more](https://cloud.ibm.com/docs/workload-protection?topic=workload-protection-regions). You can complete the steps in any of the supported regions.







 Step 1. Manage user access 

Every user that accesses the IBM Cloud Security and Compliance Center Workload Protection service in your account must be assigned an access policy with an IAM user role defined. The policy determines the actions that the user can run within the context of the service or instance you selected. The allowable actions are customized and defined as operations that are allowed to be run on the service. The actions are then mapped to IAM user roles. For more information, see [Managing user access in the IBM Cloud](https://cloud.ibm.com/docs/workload-protection?topic=workload-protection-iamiam).

When a user is granted permissions in the IBM Cloud to work with the IBM Cloud Security and Compliance Center Workload Protection service, the user is automatically granted a service role. This role determines the actions that a user has permissions to run. For more information, see [Controlling access through IAM](https://cloud.ibm.com/docs/workload-protection?topic=workload-protection-iam).

Before you can provision an instance, you need to understand:



* The account owner can create, view, and delete an instance of a service in the IBM Cloud, and can grant permissions to other users to work with the IBM Cloud Security and Compliance Center Workload Protection service.
Regions 

A list of supported regions for the IBM Cloud Security and Compliance Center Workload Protection service.

The IBM Cloud Security and Compliance Center Workload Protection service is available in the following regions:

Zoom

![The image shows the locations where the IBM Cloud Security and Compliance Center Workload Protection service is available.](https://cloud.ibm.com/docs-content/v1/content/667adc0b8a7fdb0b349b1158d8e128640b5bc72b/workload-protection/images/locations.svg)

Figure 1. Displays the regions where you can create and manage IBM Cloud Security and Compliance Center Workload Protection resources.

This image is an artistic representation and does not reflect actual political or geographic boundaries.

You can create IBM Cloud Security and Compliance Center Workload Protection resources in one of the supported IBM Cloud locations, which represent the geographic area where your IBM Cloud Security and Compliance Center Workload Protection requests are handled and processed.

The following table lists the locations where the service is available:



Table 1. List of locations where the service is available

 Geography        Region                   EU-Supported   HA Status 

 Asia Pacific     Sydney (au-syd)          N/A            MZR       
 Asia Pacific     Osaka (jp-osa)           N/A            N/A       
 Asia Pacific     Tokyo (jp-tok)           N/A            MZR       
 Europe           Frankfurt (eu-de) ()     YES            MZR       
 Europe           London (eu-gb)           NO             MZR       
 North America    Dallas (us-south)        N/A            MZR       
 North America    Washington (us-east)     N/A            MZR       
 North America    Toronto (ca-tor)         N/A            MZR       
 South America    Sao Paulo (br-sao)       N/A            MZR       



Where



*  A geography is a geographic area or larger political body that contains one or more regions.
*  A region is a defined geographic territory. A region could be a specific postal code area, a town, a city, a state, a group of states, or even a group of countries.
*  N/A means feature that is not applicable to that geography.



() For more information, see [Enabling the EU Supported setting](https://cloud.ibm.com/docs/account?topic=account-eu-hipaa-supportedbill_eusupported).
Veeam backup for Office 365 

Veeam backup for Office 365 protects your data by backing up your Exchange Online, SharePoint Online, and OneDrive for Business data. True data protection and RPO (recovery point objective) are not included with Office 365. Veeam provides a software defined solution that protects Office 365, offers granular restoration, and recovers data to anywhere.



  Features 



*  Custom scheduling of backups
*  View backup and restore session statistical information
*  Create and view data protection reports
*  Back up different types of MS objects such as Groups, Sites, Users, and Organizations



As you provision a server with the MS image, you can select Veeam backup for Office 365 as an image add-on. For more information about Veeam backup for Office 365 and IBM Cloud, see [IBM Cloud Veeam backup support for Office 365](https://www.ibm.com/cloud/blog/ibm-cloud-announces-new-veeam-backup-support-for-microsoft-office-365).

For more information about Veeam and IBM, see [Veeam on IBM Cloud](https://www.ibm.com/cloud/veeam).

Veeam backup Office 365 is available on bare metal and virtual servers on only a monthly basis.
A condition defines either a workspace or a query within a workspace. For instance, you can run your inventory against all the hosts in your dev workspace, or against all hosts with a webserver tag in your dev workspace. You can also add multiple conditional target resources for your workspaces to run.

Dynamic inventory allows to create the collection of hosts in a inventory file that defines the hosts and group of hosts upon which your playbook operates. The hostnames and IP addresses must be provided in an hosts.ini file. Follow the syntax and example for the INI file format that can be used in the create and update actions commands as --TARGET-FILE <ABSOLUTE_PATH with FILE_NAME> argument.

Syntax

[hostgroupname1]
<IPaddress1>
<IPaddress2>
[hostgroupname2]
<IPaddress1>

Example

[webserverhost]
178.54.68.78
187.54.68.78
[dbhost]
174.45.86.87



Inventory host group parameters

 Target Description 

 hostgroupname1 The application hostname. For example, Web Server host application name as [webserverhost], database hostname as [dbhost], in a single word. Note the system validates and throws an error if a space is provided in the host group name. 
 IPaddress The IP addresses of the hostname. 



You can set the proxy between an SSH client and the IBM Cloud inventory resources where you want to run an Ansible playbook in the IBM cloud resource inventory SSH key field. This set up adds a layer of security to your IBM Cloud resources, and minimize the surface of potential vulnerabilities. Note now the Actions support only one SSH key for all virtual server instances. The SSH key must contain n at the end of the key details in case of command-line or API calls.





 ibmcloud schematics action create 

Create an action to run an Ansible playbook on a single target host or a group of target hosts. You use Ansible playbooks to perform cloud operations or install software on cloud resources.
A condition defines either a workspace or a query within a workspace. For instance, you can run your inventory against all the hosts in your dev workspace, or against all hosts with a webserver tag in your dev workspace. You can also add multiple conditional target resources for your workspaces to run.

Dynamic inventory allows to create the collection of hosts in a inventory file that defines the hosts and group of hosts upon which your playbook operates. The hostnames and IP addresses must be provided in an hosts.ini file. Follow the syntax and example for the INI file format that can be used in the create and update actions commands as --TARGET-FILE <ABSOLUTE_PATH with FILE_NAME> argument.

Syntax

[hostgroupname1]
<IPaddress1>
<IPaddress2>
[hostgroupname2]
<IPaddress1>

Example

[webserverhost]
178.54.68.78
187.54.68.78
[dbhost]
174.45.86.87



Inventory host group parameters

 Target Description 

 hostgroupname1 The application hostname. For example, Web Server host application name as [webserverhost], database hostname as [dbhost], in a single word. Note the system validates and throws an error if a space is provided in the host group name. 
 IPaddress The IP addresses of the hostname. 



You can set the proxy between an SSH client and the IBM Cloud inventory resources where you want to run an Ansible playbook in the IBM Cloud resource inventory SSH key field. This set up adds a layer of security to your IBM Cloud resources, and minimize the surface of potential vulnerabilities. Note now the Actions support only one SSH key for all virtual server instances. The SSH key must contain n at the end of the key details in case of command-line or API calls.





 ibmcloud schematics action create 

Create an action to run an Ansible playbook on a single target host or a group of target hosts. You use Ansible playbooks to perform cloud operations or install software on cloud resources.