How-to guides

Using Cloud Control

The user must first create a landing zone to use the Cloud Control service. When a landing zone is created, you can use the management features of Cloud Control.

Create Landing Zone

To use Cloud Control in the Samsung Cloud Platform Console, you must first create a landing zone.

Follow these steps to create a landing zone.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.

2. Click the Create Landing Zone button on the Service Home page. 2. Go to the Create Landing Zone page.

3. After setting the configuration items in the Rate Review and Organizational Unit Configuration area, click the Next button.

   Category	required status	Detailed description
   Home region	-	Home region of Cloud Control Cloud Control designates the default region as the home region and cannot be changed All regions except the default region are managed by Cloud Control
   Basic organizational unit	Required	Enter the primary organizational unit within the landing zone Case-sensitive English letters, up to 128 characters The primary organizational unit includes shared Accounts (Log Account, Audit Account) Security: Name of the primary organizational unit for the shared Account Can be modified after the landing zone is created
   Additional organizational unit	Required	Enter additional organizational unit within the landing zone Case-sensitive English letters, enter up to 128 characters Can be added after the landing zone is created

   Table. Landing zone creation - cost review and organizational unit configuration items

4. After setting the configuration items in the Shared Account Configuration area, click the Next button.

   Category	Required status	Detailed description
   Management Account	-	The Management Account name is displayed and cannot be edited.
   Log Account	Required	Enter Log Account information Account name: Korean, English, numbers, spaces, special characters(+=-_@[](),.) using them, enter within 3 to 30 characters Email: Enter up to 60 characters in a valid email address format Email confirmation: Re-enter the email address entered in Email
   Audit Account	Required	Enter Log Account information Account name: Korean characters, English letters, numbers, spaces, and special characters (+=-_@[](),.) using 3 to 30 characters Email: Enter up to 60 characters in a valid email address format Email Confirmation: Re-enter the email address entered in Email The same email as Log Account cannot be used

   Table. Landing Zone Creation - Shared Account Configuration Items

   Reference

   • Log Account is a repository of logs for API activity and resource configurations collected from all Accounts. * Log Account cannot be changed.
   • The Audit Account is a restricted account, and the security and compliance team can obtain access to all accounts within the organization through the Audit Account.

5. After setting the configuration items in the Additional Configuration area, click the Next button.

   Category	Required status	Detailed description
   Account access configuration	Required	Select a method to manage access to the Account Account access via ID Center Configure users who perform specific tasks in the Account by creating pre-configured groups and permission sets Automatically assign users when provisioning an Account with Account Factory or registering an existing Account Selectable only when using ID Center’s own directory Self-managed Account access Cloud Control does not create directory groups or permission sets for the landing zone Automatically assign users when provisioning an Account with Account Factory or registering an existing Account Manage access to the Account via ID Center or other Account access methods
   Trail configuration	-	Proceed with automatic configuration
   Detection guardrail	Selection	Select whether to enable the detective guardrail When the detective guardrail is enabled, it applies only to the default organizational unit Even after creating a landing zone, you can change settings on the Landing Zone Settings page For more information about the detective guardrail, see 탐지 가드레일

   Table. Create Landing Zone - Additional Configuration Items

6. In the Check Input Information area, after reviewing the landing zone configuration information and Service Permissions, check the agreement regarding permissions and guidelines.

7. Click the Create button. 5. A popup window announcing the creation of a landing zone opens.

8. After checking the information about creating a landing zone, click the Confirm button. 6. The landing zone creation request has been completed.

   • Creating a landing zone takes some time, and a notification is sent when the task is completed.
   • Once the landing zone creation is complete, you can view the full menu of Cloud Control and the organization status on the Service Home page.

Check detailed landing zone information

Landing Zone Settings page allows you to view detailed information about the landing zone.

To view detailed information about the landing zone, follow these steps.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
2. Service Home on the page, click the Landing Zone Settings menu. 2. Navigate to the Landing Zone Settings page.

Delete Landing Zone

If you fail to create a landing zone or do not use it, you can delete the landing zone.

To delete a landing zone, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Go to the Service Home page of Cloud Control.
2. On the Service Home page, click the Landing Zone Settings menu. 2. Navigate to the Landing Zone Settings page.
3. On the Landing Zone Settings page, click the Delete Landing Zone button. 3. Delete Landing Zone popup opens.
4. Landing Zone Deletion After entering the Cloud Contorl ID displayed in the popup into the deletion confirmation area, click the Confirm button. 4. The landing zone deletion request has been completed.
   • While deleting a landing zone, an explanation regarding the landing zone deletion process is displayed on the Service Home page.

Managing organizational units and Accounts

You can view the list of organizational units and accounts, register them in Cloud Control, and manage them.

To view and manage organizational units and the Account list, follow the steps below.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Organization menu. 2. Navigate to the Organization Unit and Account Management page.
3. Select the view mode at the top right of the Organization Unit and Account Management page.
   • Click the View Hierarchy button to view and manage organizational units and Accounts in a hierarchical structure.

     Category	Detailed description
     Create a sub-organization unit	Add a new organizational unit under the selected organizational unit Enabled only when a single organizational unit is selected in the hierarchy Refer to 조직 단위 생성하기 for more details
     More	You can manage organization units or register a new Account Organization Unit: Deletion/registration/re-registration of organization units, and application/removal of detective guardrails possible For detailed information on managing organization units, see 조직 단위 관리하기 For detailed information on detective guardrails, see 탐지 가드레일 Account: Account registration/deregistration possible For detailed information on Account registration and deregistration, see Account 관리하기
     Organization Unit/Account Name	Display the names of organizational units and Accounts in a measurement-structure format +, - buttons can be clicked to expand or collapse the hierarchy Clicking an organizational unit/Account name navigates to the detail page
     ID/email	Organization units display the ID, and Account displays the ID and email
     status	Cloud Control registration status for organization units or Accounts Registered, Not registered, Registering, Registration failed No status displayed when Root
     Register organization unit	Cloud Control registration status of sub‑organization units Number of registered organization units / total organization units displayed
     Register Account	Sub Account’s Cloud Control registration status registered Account count / total Account count displayed
     Detection guardrail	Detection guardrail application status for organizational units or sub-units

     Table. Hierarchy view items
   • View Account List: You can view and manage the list of Accounts that constitute Cloud Control.

     Category	Detailed description
     Account registration	Register the selected Account from the Account list to Cloud Control When you select an Account in the Account list that is Unregistered, Registration Failed status, it becomes active For detailed information about Account registration, see Account 등록하기
     More > Unregister Account	Deregister the selected Account from the Account list When you select an Account in the Account list that is in registered, registration failed status, it becomes active Shared Accounts cannot be deregistered For more details on Account deregistration, see Account 등록 해제하기
     Account name	Account name
     Account ID	Account ID
     email	Account user email
     status	Cloud Control registration status of an organization unit or Account Registered, Not registered, Registering, Registration failed When Root, no status is displayed

     Table. Account list view item
   • Create Account button click allows you to create a new Account. * For more details, refer to Account 생성하기.

Check organization and Account detailed information

You can view and edit the detailed information of organizational units and Account. To view detailed information of the organization unit and Account, follow these steps.

1. All Services > Management > Cloud Control Click the menu. 1. Go to the Service Home page of Cloud Control.
2. On the Service Home page, click the Organization menu. 2. Navigate to the Organization Unit and Account Management page.
3. Click the View Hierarchy button on the Organization Unit and Account Management page.
4. Click the resource name in the hierarchical list to view its details. 4. Navigate to the detailed page of the resource.
   • Root: Root Details page. * For detailed information, see Root 상세 정보.
   • Organization unit name: Organization unit details Navigate to the page. * For detailed information, see 조직 단위 상세 정보.
   • Account name: Go to the Account details page. * For more details, see the Account 상세 정보.

Root detailed information

On the Root Details page, you can view and manage the detailed information of the organization Root and the list of subordinate Accounts. The Root Details page consists of Basic Information, Sub Account tabs.

Basic Information

You can view basic information about the Root organization and the number of organizational units and Accounts registered in Cloud Control.

Sub Account

You can view and manage the list of Accounts under the Root and the registration status of Cloud Control.

Organization Unit Detailed Information

On the Organization Unit Details page, you can view and manage the detailed information of the organization unit, its subordinate Accounts, and the applied preventive guardrails and detection guardrails. Organization Unit Details page consists of Basic Information, Sub Account, Preventive Guardrails, Detection Guardrails tabs.

Basic Information

You can view basic and detailed information about the organizational unit.

Sub Account

You can view and manage the list of subordinate Accounts for an organizational unit.

Preventive Guardrail

You can view and manage the list of preventive guardrails applied at the organizational level.

Detection Guardrail

You can view and manage the diagnostic results of detection guardrails applied at the organizational level.

Check detailed information of Account

Account Details page allows you to view the account’s detailed information and the list of applied preventive guardrails. Account Details page consists of Basic Information, Preventive Guardrails tabs.

Basic Information

You can view basic and detailed information about the organization unit.

Preventive Guardrail

You can view the list of preventive guardrails applied to the Account.

Check Access Portal Connection Information

User and Access page allows you to view the Access Portal connection URL and connection methods (password, SSO, MFA).

To check the Access Portal connection information, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Go to the Service Home page of Cloud Control.
2. On the Service Home page, click the User and Access menu. 2. Navigate to the User and Access page.
3. Check the information in the User and Access page’s Integrated Access Management area.

Check user credential information

User and Access page lets you view the user credential source type and the ID Center ID.

To verify user credential information, follow the steps below.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the User and Access menu. 2. Navigate to the User and Access page.
3. Check the information in the User Credential Management area of the User and Access page.