Table: ibm_is_vpc - Query IBM Cloud Virtual Private Clouds using SQL

A Virtual Private Cloud (VPC) in IBM Cloud is a secure, isolated virtual network where you can define and control a network space for your own applications and services that run on Virtual Server Instances. VPC provides advanced networking features, including custom subnetting, Network ACLs, and Security Groups. It offers a high degree of control and flexibility over your cloud environment.

Table Usage Guide

The ibm_is_vpc table provides insights into Virtual Private Clouds within IBM Cloud. As a network administrator or cloud engineer, explore VPC-specific details through this table, including network configurations, security settings, and associated metadata. Utilize it to uncover information about VPCs, such as those with specific security settings, the network configurations of each VPC, and the overall structure of your cloud network.

Examples

Basic info

Discover the segments that have classic access in your IBM cloud virtual private cloud (VPC) settings to understand potential security implications and to enhance the overall network configuration.

select
  id,
  name,
  crn,
  classic_access,
  cse_source_ips
from
  ibm_is_vpc;

select
  id,
  name,
  crn,
  classic_access,
  cse_source_ips
from
  ibm_is_vpc;

List all VPCs with classic access

Discover the segments that have classic access within your virtual private cloud (VPC) settings. This allows you to identify potential security risks and manage access controls more effectively.

select
  id,
  name,
  crn,
  classic_access,
  cse_source_ips
from
  ibm_is_vpc
where
  classic_access;

select
  id,
  name,
  crn,
  classic_access,
  cse_source_ips
from
  ibm_is_vpc
where
  classic_access = 1;

List address prefix details for VPCs

Analyze the settings to understand the details of address prefixes for Virtual Private Clouds (VPCs). This is useful to manage network configurations and identify default settings.

select
  name,
  addressp ->> 'cidr' as "cidr",
  addressp -> 'zone' ->> 'name' as "zone",
  addressp ->> 'created_at' as "created_at",
  addressp ->> 'is_default' as "is_default"
from
  ibm_is_vpc,
  jsonb_array_elements(address_prefixes) addressp;

select
  name,
  json_extract(addressp.value, '$.cidr') as "cidr",
  json_extract(addressp.value, '$.zone.name') as "zone",
  json_extract(addressp.value, '$.created_at') as "created_at",
  json_extract(addressp.value, '$.is_default') as "is_default"
from
  ibm_is_vpc,
  json_each(address_prefixes) as addressp;

Query examples

Schema for ibm_is_vpc

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
account_id	text	=, !=, ~~, ~~, !~~, !~~	The ID fof the account.
address_prefixes	jsonb		Array of all address pool prefixes for this VPC.
akas	jsonb		Array of globally unique identifier strings (also known as) for the resource.
classic_access	boolean	!=, =	Indicates whether this VPC is connected to Classic Infrastructure.
created_at	timestamp with time zone		The date and time that the VPC was created.
crn	text		The CRN for this VPC.
cse_source_ips	jsonb		Array of CSE source IP addresses for the VPC. The VPC will have one CSE source IP address per zone.
default_network_acl	jsonb		The default network ACL to use for subnets created in this VPC.
default_routing_table	jsonb		The default routing table to use for subnets created in this VPC.
default_security_group	jsonb		The default security group to use for network interfaces created in this VPC.
href	text		The URL for this VPC.
id	text	=	The unique identifier for this VPC.
name	text		The unique user-defined name for this VPC.
region	text		The region of this VPC.
resource_group	jsonb		The resource group for this VPC.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
status	text		The status of this VPC.
tags	jsonb		A map of tags for the resource.
title	text		Title of the resource.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- ibm

You can pass the configuration to the command with the --config argument:

steampipe_export_ibm --config '<your_config>' ibm_is_vpc