vania-janet/multiturn-rag-retrieval-data huggingface dataset:
ibmcloud is ipsec-policy-update IPSEC_POLICY [--name NEW_NAME] [--authentication-algorithm disabled | sha256 | sha384 | sha512] [--pfs disabled | group_14 | group_15 | group_16 | group_17 | group_18 | group_19 | group_20 | group_21 | group_22 | group_23 | group_24 | group_31] [--encryption-algorithm aes128 | aes128gcm16 | aes192 | aes192gcm16 | aes256 | aes256gcm16] [--key-lifetime KEY_LIFETIME] [--output JSON] [-q, --quiet]



 Command examples 



* ibmcloud is ipsec-policy-update fee82deba12e4c0fb69c3b09d1f12345 --name my-ipsec-policy
* ibmcloud is ipsec-policy-update my-ipsec-policy --name my-renamed-ipsec-policy
* ibmcloud is ipsec-policy-update fee82deba12e4c0fb69c3b09d1f12345 --authentication-algorithm sha256
* ibmcloud is ipsec-policy-update fee82deba12e4c0fb69c3b09d1f12345 --pfs group_14
* ibmcloud is ipsec-policy-update fee82deba12e4c0fb69c3b09d1f12345 --encryption-algorithm aes128
* ibmcloud is ipsec-policy-update fee82deba12e4c0fb69c3b09d1f12345 --key-lifetime 3600 --output JSON







 Command options 



* IPSEC_POLICY: ID or name of the IPsec policy.
* --name: New name of the IPsec policy.
* --authentication-algorithm: The authentication algorithm.
"certificate_authority": "my-configured-intermediate-ca",
"certificate_template": "my-configured-template",
"common_name": "example.com",
"created_by": "iam-ServiceId-b7ebcf90-c7a9-495b-8ce8-bbf33cb95ca0",
"creation_date": "2022-05-03T18:18:43Z",
"crn": "crn:v1:bluemix:public:secrets-manager:us-south:a/791f5fb10986423e97aa8512f18b7e65:e415e570-f073-423a-abdc-55de9b58f54e:secret:2ca56a3b-a6e8-d2e2-5377-b6559babfac0",
"downloaded": true,
"expiration_date": "2022-06-04T18:18:43Z",
"id": "2c08d55d-1854-4dbd-9c25-bcd26828fe77",
"issuer": "example.com",
"key_algorithm": "RSA2048",
"labels": [],
"last_update_date": "2022-05-03T18:18:43Z",
"name": "my-test-private-certificate",
"rotation": {
"auto_rotate": false
},
"secret_data": {
"ca_chain": [
"-----BEGIN CERTIFICATE-----nMIIGZjCCBU6gAwIBAgIUHTgL...(truncated)"
],
"certificate": "-----BEGIN CERTIFICATE-----nMIIDJDCCAgygAwIBAgIUarx9...(truncated)",
> * [ibm_iam_trusted_profile_policy](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/iam_trusted_profile_policy)<br> * [ibm_iam_trusted_profiles](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/iam_trusted_profiles)<br> * [ibm_iam_user_policy](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/iam_user_policy)<br> * [ibm_iam_user_profile](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/iam_user_profile)<br> * [ibm_iam_users](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/iam_users)<br><br><br> 







 Internet services 



 Resources Data sources
"pm.test("Request was successful", function() {",
" pm.response.to.be.success; ",
"});"
]
}
}
],
"request": {
"auth": {
"type": "bearer",
"bearer":
{
"key": "token",
"value": "{{iamtoken}}",
"type": "string"
}
]
},
"method": "PUT",
"header":
{
"key": "ibm-service-instance-id",
"value": "{{serviceid}}"
},
{
"key": "ibm-sse-kp-encryption-algorithm",
"value": "AES256"
},
{
"key": "ibm-sse-kp-customer-root-key-crn",
"value": "{{rootkeycrn}}"
}
],
"body": {
"mode": "raw",
"raw": ""
},
"url": {
"raw": "https://{{endpoint-region}}cloud-object-storage.appdomain.cloud/{{bucket}}kp",
"protocol": "https",
"host":
"{{endpoint-region}}",
"objectstorage",
"softlayer",
"net"
],
"path":
"{{bucket}}kp"
]
}
},
"response": ]
},
{
"name": "Delete bucket (key protect)",
"event":
{
"listen": "test",
"script": {
* [IBM Data Processing Addendum (DPA)](https://www.ibm.com/support/customer/csol/terms/?id=DPA-DPL)







 HIPAA support 

Hyper Protect Crypto Services meets controls for the US Health Insurance Portability and Accountability Act (HIPAA) to ensure safeguarding of protected health information (PHI).

If you or your company is a covered entity as defined by HIPAA, you can enable the HIPAA Supported setting for your IBM Cloud account. To find out more, see [Enabling the HIPAA Supported setting](https://cloud.ibm.com/docs/account?topic=account-eu-hipaa-supportedenabling-hipaa).





 IBM Cloud for Financial Services 

Hyper Protect Crypto Services is IBM Cloud for Financial Services certified. For information about requesting an IBM Cloud for Financial Services report, see [IBM Cloud industry compliance programs](https://www.ibm.com/cloud/compliance/industry).





 IRAP support 

Hyper Protect Crypto Services meets the requirements of the Information Security Registered Assessors Program (IRAP) to provide high-quality information and communications technology services to government in support of Australia’s security.

For more information, see [IBM Cloud regional compliance programs](https://www.ibm.com/cloud/compliance/regional).





 ISO 27001, 27017, 27018 

Hyper Protect Crypto Services is ISO 27001, 27017, 27018 certified. You can view compliance certifications by visiting [IBM Cloud global compliance programs](https://www.ibm.com/cloud/compliance/global).





 SOC 2 Type 1 

Hyper Protect Crypto Services is SOC 2 Type 1 certified. For more information about requesting an IBM Cloud SOC 2 report, see [IBM Cloud global compliance programs](https://www.ibm.com/cloud/compliance/global).
}
from-zone VPN to-zone CUSTOMER-PRIVATE {
policy VPN-to-Custprivate {
match {
source-address Network-B;
destination-address any;
application any;
}
then {
permit;
}
}
Show more





 Sample configuration for Site B (London): 

 show interfaces
ge-0/0/0 {
description PRIVATE_VLANs;
flexible-vlan-tagging;
native-vlan-id 822;
unit 0 {
vlan-id 822;
family inet {
address 10.45.165.140/26;
}
}
unit 10 {
vlan-id 821;
family inet {
address 10.45.53.49/29;
}
}
}
st0 {
unit 1 {
family inet {
address 169.254.200.1/31;
}
}
 show security ike
proposal IKE-PROP {
authentication-method pre-shared-keys;
dh-group group5;
authentication-algorithm sha1;
encryption-algorithm aes-128-cbc;
lifetime-seconds 3600;
}
policy IKE-POL {
mode main;
proposals IKE-PROP;
pre-shared-key ascii-text "$9$H.fz9A0hSe36SevW-dk.P"; SECRET-DATA
}
gateway IKE-GW {
ike-policy IKE-POL;
address 169.100.100.100;
external-interface ge-0/0/1.0;
}
 show security ipsec
proposal IPSEC-PROP {
protocol esp;
authentication-algorithm hmac-sha1-96;
encryption-algorithm aes-128-cbc;
lifetime-seconds 3600;
}
policy IPSEC-POL {
perfect-forward-secrecy {
keys group5;
}
proposals IPSEC-PROP;
}
"updated_by": "iam-ServiceId-c0c7cfa4-b24e-4917-ad74-278f2fee5ba0"
}
]
},
"wrap_info": null,
"warnings": null,
"auth": null
}







 List secret policies 

Retrieves a list of policies that are associated with a secret.



 Example request 

List the policies for an username_password secret.

curl -X GET "https://{instance_id}.{region}.secrets-manager.appdomain.cloud/v1/ibmcloud/username_password/secrets/{secret_id}/policies" -H 'X-Vault-Token: {Vault-Token}'

List the policies for a username_password secret in an existing secret group.

curl -X GET "https://{instance_id}.{region}.secrets-manager.appdomain.cloud/v1/ibmcloud/username_password/secrets/groups/{group_id}/{secret_id}/policies" -H 'X-Vault-Token: {Vault-Token}'





 Example response 

{
"request_id": "89698bdc-d787-4a74-eb2f-53e055ddc7f3",
"lease_id": "",
"renewable": false,
"lease_duration": 0,
"data": {
"policies": [
{
"created_by": "iam-ServiceId-c0c7cfa4-b24e-4917-ad74-278f2fee5ba0",
"creation_date": "2021-06-21T14:30:17Z",
"address": "192.0.2.0",
"href": "https://us-south.iaas.cloud.ibm.com/subnets/c2338e66-dcb5-4e9b-b572-108d47ca479a/reserved_ips/b96d456e-88f7-42a7-b02d-450a6d758534",
"id": "b96d456e-88f7-42a7-b02d-450a6d758534",
"name": "my-reserved-ip",
"resource_type": "subnet_reserved_ip"
},
"resource_type": "share_mount_target",
"security_groups": [
{
"crn": "crn:...]",
"href": "https://us-south.iaas.cloud.ibm.com/v1/security_groups/b79365be-f626-45d4-94ae-83f16fa4edd3",
"id": "b79365be-f626-45d4-94ae-83f16fa4edd3",
"name": "my-security-group",
"resource_type": "security_group"
}
],
"subnet": {
"crn": "crn:[...]",
"href": "https://us-south.iaas.cloud.ibm.com/v1/subnets/c2338e66-dcb5-4e9b-b572-108d47ca479a",
"id": "c2338e66-dcb5-4e9b-b572-108d47ca479a",
"name": "my-subnet",
"resource_type": "subnet"
},
"ordered_on": "2021-10-08T03:25:51Z",
"state": 0,
"state_description": "Pre-activation"
},
"key_algorithm": "RSA2048",
"labels": [],
"last_update_date": "2021-10-08T03:25:51Z",
"name": "my-test-public-certificate",
"rotation": {
"auto_rotate": false,
"rotate_keys": false
},
"secret_type": "public_cert",
"state": 0,
"state_description": "Pre-activation",
"versions": [],
"versions_total": 1
},
"warnings": null
}

The command to create a private_cert secret returns the following output:

{
"request_id": "7c72b7a6-0342-508a-1684-9625e11555db",
"lease_id": "",
"lease_duration": 0,
"renewable": false,
"data": {
"algorithm": "SHA256-RSA",
"alt_names": [
"example.com"
],
"certificate_authority": "my-configured-intermediate-ca",
"certificate_template": "my-configured-template",
"common_name": "example.com",
"created_by": "iam-ServiceId-b7ebcf90-c7a9-495b-8ce8-bbf33cb95ca0",
"creation_date": "2022-05-03T18:18:43Z",
"disk_encryption_key_crn": "crn:v1:<...>:key:<id>"
}'

The Key Protect key needs to be identified by its full CRN, not just its ID. A key protect CRN is in the format crn:v1:<...>:key:<id>.





 Using the Key Protect Key in the API 

In the API, use the disk_encryption_key parameter in the body of the request.

curl -X POST https://resource-controller.cloud.ibm.com/v2/resource_instances -H 'Authorization: Bearer <>' -H 'Content-Type: application/json' -d '{
"name": "my-instance",
"target": "blue-us-south",
"resource_group": "5g9f447903254bb58972a2f3f5a4c711",
"resource_plan_id": "databases-for-x-standard",
"disk_encryption_key_crn": "crn:v1:<...>:key:<id>"
}'

The Key Protect key needs to be identified by its full CRN, not just its ID. A key protect CRN is in the format crn:v1:<...>:key:<id>.





 Key Rotation 

Key Protect offers manual and automatic [key rotation](https://cloud.ibm.com/docs/key-protect?topic=key-protect-rotate-keys) and key rotation is supported by Cloud Databases deployments. When you rotate a key, the process initiates a syncing KMS state task, and your deployment is reencrypted with the new key. The task is displayed on the Tasks page on your deployment's Overview and the associated Key Protect and Cloud Databases events are sent to Activity Tracker.

For more information, see [Rotating manually or automatically](https://cloud.ibm.com/docs/key-protect?topic=key-protect-key-rotationcompare-key-rotation-options).
"id": "0716-6fd4925d-7774-4e87-829e-7e5765d454ad",
"name": "my-reserved-ip",
"resource_type": "subnet_reserved_ip"
},
"resource_type": "share_mount_target",
"security_groups":
{
"crn": "crn:...]",
"href": "https://us-south.iaas.cloud.ibm.com/v1/security_groups/r134-1dfeccef-3ad6-4760-8653-a202bc795db4",
"id": "r134-1dfeccef-3ad6-4760-8653-a202bc795db4",
"name": "my-security-group",
"resource_type": "security_group"
}
],
"subnet": {
"crn": "crn:...]",
"href": "https://us-south.iaas.cloud.ibm.com/v1/subnets/35984145-9c3a-4626-8ee7-52c7a8742752",
"id": "35984145-9c3a-4626-8ee7-52c7a8742752",
"name": "my-subnet",
"resource_type": "subnet"
},
"transit_encryption": "none",
"virtual_network_interface": {
"crn": "crn:...]",
"href": "https://us-south.iaas.cloud.ibm.com/v1/virtual_network_interfaces/388f01db-41bb-42aa-b5cd-34ba41288d47",
"request_id": "e00000b-0000-0ad1-beb0-00000d0000",
"lease_id": "",
"renewable": false,
"lease_duration": 0,
"data": {
"created_by": "IBMid-662001YC6X",
"creation_date": "2022-01-26T20:11:29Z",
"crn": "crn:v1:bluemix:public:secrets-manager:eu-gb:a/4b85ea6bbea644a6be376647f5f961f5:5f1a3554-5f59-4164-8bfc-5eef0a20cf66:secret:e006e8bc-f497-dc93-4102-9d9cf2051a41",
"description": "Test secret in test secret group.",
"downloaded": false,
"id": "00000ea00-7d0000-0000ce-c0002a-0a0000f4b3ee",
"labels": [],
"last_update_date": "2022-01-27T21:00:27Z",
"name": "test-kv-secret-from-group",
"secret_data": {
"payload": {
"key7": "value7"
}
},
"secret_group_id": "00000ea00-7d0000-0000ce-c0002a-0a0000f4b3ee",
"secret_type": "kv",
"state": 1,
"state_description": "Active",
"versions": [
{
"created_by": "iam-ServiceId-00000ea00-7d0000-0000ce-c0002a-0a0000f4b3ee",
primary_ip {
name = "example-reserved-ip1"
auto_delete = true
address = "${replace(ibm_is_subnet.example_subnet.ipv4_cidr_block, "0/24", "14")}"
}
}

vpc = ibm_is_vpc.example_vpc.id
zone = "us-south-1"
keys = [ibm_is_ssh_key.example_sshkey.id]
}
Show more
[Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) 
 VPN - L3 (IPsec) ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) 
 VPN - L3 (SSL) ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) ![Available](https://cloud.ibm.com/docs-content/v1/content/5bdb37c0149145723c5437e8176651928565e722/icons/checkmark-icon.svg) !
"created_at": "2023-07-11T23:31:59Z",
"crn": "crn:[...]",
"encryption": "provider_managed",
"href": "https://us-south.iaas.cloud.ibm.com/v1/shares/ff859972-8c39-4528-91df-eb9160eae918",
"id": "ff859972-8c39-4528-91df-eb9160eae918",
"iops": 48000,
"lifecycle_state": "stable",
"name": "share-name1",
"profile": {
"href": "https://us-south.iaas.cloud.ibm.com/v1/share/profiles/tier-10iops",
"name": "tier-10iops",
"resource_type": "share_profile"
},
"replication_role": "none",
"replication_status": "none",
"replication_status_reasons": [],
"resource_group": {
"crn": "crn:[...]",
"href": "https://resource-controller.cloud.ibm.com/v2/resource_groups/6b45d0aa-e0a6-478b-a5d9-bb45b106676d",
"id": "6b45d0aa-e0a6-478b-a5d9-bb45b106676d",
"name": "Default"
},
"resource_type": "share",
"size": 4800,
"mount_targets": [
{
Provisions Specific to .COM, and .NET Registrations Indemnification 

You agree to indemnify, defend and hold harmless the .COM, .NET and .NAME Registry Operator, VeriSign, Inc., and its directors, officers, employees, agents, and affiliates from and against any and all claims, damages, liabilities, costs and expenses, including reasonable legal fees and expenses arising out of or relating to the Registered Name holder's domain name registration.





 Provisions Specific to .ORG Registrations Indemnification 

You agree to indemnify, defend and hold harmless the .ORG Registry Operator, Public Interest Registry Co. and its directors, officers, employees, agents, and affiliates from and against any and all claims, damages, liabilities, costs and expenses, including reasonable legal fees and expenses arising out of or relating to the Registered Name holder's domain name registration.





 Provisions Specific to .INFO Registrations Indemnification 

You agree to indemnify, defend and hold harmless the .INFO Registry Operator, Afilias Limited and its directors, officers, employees, agents, and affiliates from and against any and all claims, damages, liabilities, costs and expenses, including reasonable legal fees and expenses arising out of or relating to the Registered Name holder's domain name registration.





 Provisions Specific to .US and .INFO 

You agree to indemnify, defend and hold harmless the .US and .INFO Registry Operator, NeuStar Inc. and NeuLevel inc. and its directors, officers, employees, agents, and affiliates from and against any and all claims, damages, liabilities, costs and expenses, including reasonable legal fees and expenses arising out of or relating to the Registered Name holder's domain name registration.
"name": "test-imported-certificate-in-group",
"private_key_included": true,
"secret_group_id": "339c026a-ac0f-1ea1-3d43-99adf871b49a",
"secret_type": "imported_cert",
"serial_number": "fc:22:29:7e:57:25:8a:05",
"state": 1,
"state_description": "Active",
"validity": {
"not_after": "2021-06-04T15:25:44Z",
"not_before": "2021-06-03T15:25:44Z"
},
"versions": [
{
"created_by": "iam-ServiceId-c0c7cfa4-b24e-4917-ad74-278f2fee5ba0",
"creation_date": "2021-06-03T20:50:11.278296706Z",
"expiration_date": "2021-06-04T15:25:44Z",
"id": "e4f44e8b-abe0-9267-88da-199e754f974a",
"serial_number": "fc:22:29:7e:57:25:8a:05",
"validity": {
"not_after": "2021-06-04T15:25:44Z",
"not_before": "2021-06-03T15:25:44Z"
}
}
]
},
"wrap_info": null,
"warnings": null,
"auth": null
}







 Get a secret 

Get the value of a secret.



 Example requests 

Get an arbitrary secret.

curl -X GET "https://{instance_id}.
iam_trusted_profile](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/iam_trusted_profile)<br> * [ibm_iam_trusted_profile_claim_rule](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/iam_trusted_profile_claim_rule)<br> * [ibm_iam_trusted_profile_claim_rules](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/iam_trusted_profiles_claim_rules)<br> * [ibm_iam_trusted_profile_link](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/iam_trusted_profile_links)<br> * [ibm_iam_trusted_profile_links](https://registry.terraform.io/providers/IBM-Cloud/ibm/latest/docs/data-sources/iam_trusted_profile_links)<br
UK South lon04,lon05,lon06 158.175.106.64/27,158.175.138.176/28, <br>141.125.79.160/28,141.125.142.96/27, <br>158.176.111.64/27,158.176.134.80/28 10.45.215.128/26, <br>10.196.59.0/26,10.72.173.0/26 
 US wdc04,wdc06,wdc07 and dal10,dal12,dal13 169.45.235.176/28,169.55.82.128/27, <br>169.60.115.32/27,169.63.150.144/28,169.62.1.224/28,169.62.53.64/27 and 150.238.230.128/27,169.63.254.64/28, <br>169.47.104.160/28,169.61.191.64/27, <br>169.60.172.144/28,169.62.204.32/27 10.148.98.0/26,10.189.2.128/26, <br>10.190.16.128/26,10.191.181.64/26, <br>10.95.173.64/26,10.185.16.64/26, <br>10.220.38.64/26 



You can collapse down the ranges into security group rules. For example, us-south and us-east as two security group rules like [169.45.235.176/28, 150.238.230.128/27]. For more information about creating security group rules, see [IBM security group rules](https://cloud.ibm.com/docs/security-groups?topic=security-groups-security-groups-guidelinesrules-1).
Getting help and support for FortiGate Security Appliance 1 Gbps 

If you have problems or questions about using the FortiGate Security Appliance (FSA) 1 Gbps, you can search for information or ask questions by using [Stack Overflow](https://stackoverflow.com/search?q=dl+ibm-cloud). Post your question then and tag it with "fsa-1g" and "ibm-cloud".
SC-6 - Resource Availability 



  Control requirements 

SC-6 - 0
:   The information system protects the availability of resources by allocating [Assignment: organization-defined resources] by [Selection (one or more): priority; quota; [Assignment: organization-defined security safeguards]].





  Implementation guidance 

See the resources that follow to learn more about how to implement this control.



*  [High availability overview](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-high-availability)







  IBM Cloud for Financial Services profile 

The rules related to this control that follow are part of the IBM Cloud for Financial Services v1.2.0 profile in [IBM Cloud® Security and Compliance Center](https://cloud.ibm.com/docs/security-compliance?topic=security-compliance-getting-started).



*  Check whether Hyper Protect Crypto Services instance has at least # crypto units
*  Check whether each Application Load Balancer for VPC is configured to use at least # zones
*  Check whether Application Load Balancer for VPC is attached with an Auto Scale for VPC instance group provided with health check
*  Check whether Application Load Balancer for VPC is configured with multiple members in the pool
*  Check whether an OpenShift cluster has worker nodes across multiple zones
*  Check that any Cloud Object Storage buckets used by Activity Tracker Event Routing are configured as cross-region
*  Check whether Application Load Balancer for VPC has health check configured when created
*  Check whether Application Load Balancer for VPC listener is configured with default pool
*  Check whether each Virtual Private Cloud is configured to use at least # zones







  NIST supplemental guidance 

Priority protection helps prevent lower-priority processes from delaying or interfering with the information system servicing any higher-priority processes. Quotas prevent users or processes from obtaining more than predetermined amounts of resources. This control does not apply to information system components for which there are only single users/roles.
* [VPC reference architecture](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-connectivity-overview)
* [Satellite reference architecture](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-overview)



Most Relevant Controls:



Table 6. Related controls for boundary protection

 Family Control 

 Access Control (AC) [AC-4 Information Flow Enforcement](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4) <br>[AC-4 (5) Information Flow Enforcement | Embedded Data Types](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.5) <br>[AC-4 (6) Information Flow Enforcement | Metadata](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.6) <br>[AC-4 (14) Information Flow Enforcement | Security Policy Filter Constraints](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.14) <br>[AC-4 (21) Information Flow Enforcement | Physical / Logical Separation of Information Flows](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.21) <br>[AC-20 Use of External Information Systems](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-20) 
 Security Assessment and Authorization (CA) [CA-3 System Interconnections](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-3)
[Secrets Manager CLI reference](https://cloud.ibm.com/docs/secrets-manager-cli-plugin)Secrets Manager CLI reference Service[Security and Compliance Center](https://cloud.ibm.com/docs/security-compliance)Security and Compliance Center Platform[Security and Compliance Center Workload Protection](https://cloud.ibm.com/docs/workload-protection)Security and Compliance Center Workload Protection ServiceStorage[Block Storage - Classic](https://cloud.ibm.com/docs/BlockStorage?topic=BlockStorage-getting-started)Block Storage - Classic Service[File Storage - Classic](https://cloud.ibm.com/docs/FileStorage?topic=FileStorage-getting-started)File Storage - Classic Service[IBM Cloud Backup](https://cloud.ibm.com/docs/Backup?topic=Backup-getting-startedgetting-started)IBM Cloud Backup Service[IBM Cloud Data Transfer Service](https://cloud.ibm.com/docs/DataTransferService?topic=DataTransferService-gettingstarted)IBM Cloud Data Transfer Service Service[Object Storage](https://cloud.ibm.com/docs/cloud-object-storage)Object Storage Service