How-to guides

Using Cloud Control

The user must first create a landing zone to use the Cloud Control service. When a landing zone is created, you can use Cloud Control’s management capabilities.

Create Landing Zone

To use Cloud Control in the Samsung Cloud Platform Console, you must first create a landing zone. To create a landing zone, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.

2. On the Service Home page, click the Create Landing Zone button. 2. Go to the Landing Zone Creation page.

3. After setting the configuration items in the Rate Review and Organizational Unit Configuration area, click the Next button.

   Category	Required	Detailed description
   Home region	-	Home region of Cloud Control Cloud Control sets the default region as the home region and cannot be changed All regions except the default region are managed by Cloud Control
   Basic organizational unit	required	Enter the default organizational unit within the landing zone Case-sensitive English letters, enter up to 128 characters The default organizational unit includes shared Accounts (Log Account, Audit Account) Security: Default organizational unit name of the shared Account Can be modified after the landing zone is created
   Additional organizational unit	required	Enter additional organizational unit within the landing zone Case-sensitive English letters, enter within 128 characters Can be added after the landing zone is created

   Table. Landing zone creation - cost review and organizational unit configuration items

4. In the Shared Account Configuration area, after setting the configuration items, click the Next button.

   Category	Required?	Detailed description
   Management Account	-	The Management Account name is displayed and cannot be edited.
   Log Account	required	Log Account information input Account name: Korean characters, English letters, numbers, spaces, special characters(+=-_@[](),.) using them to enter within 3 to 30 characters Email: Enter up to 60 characters in a valid email address format Email Confirmation: Re-enter the email address entered in Email
   Audit Account	required	Enter Log Account information Account name: Enter using Korean characters, English letters, numbers, spaces, and special characters (+=-_@[](),.) within 3 to 30 characters Email: Enter up to 60 characters in a valid email address format Email Confirmation: Re-enter the email address entered in Email The same email as Log Account cannot be used

   Table. Landing zone creation - Shared Account configuration items

   Reference

   • Log Account is a repository of logs for API activities and resource configurations collected from all Accounts. * Log Account cannot be changed.
   • The Audit Account is a restricted account, allowing the security and compliance team to obtain access rights to all accounts within the organization through the Audit Account.

5. After setting the configuration items in the Additional configuration area, click the Next button.

   Category	Required	Detailed description
   Account access configuration	required	Select a method to manage access to the Account Account access via ID Center Create preconfigured groups and permission sets to configure users who perform specific tasks in the Account Automatically assign users when provisioning an Account with Account Factory or registering an existing Account Selectable only when using ID Center’s own directory Self-managed Account access Cloud Control does not create directory groups or permission sets for the landing zone Automatically assign users when provisioning an Account with Account Factory or registering an existing Account Manage access to the Account via ID Center or other Account access methods
   Trail configuration	-	Proceed with automatic configuration
   Detection Guardrail	Select	Select whether to enable the detective guardrail When the detective guardrail is enabled, it applies only to the default organizational unit Even after creating a landing zone, settings can be changed on the Landing Zone Settings page For more information about the detective guardrail, see 탐지 가드레일

   Table. Landing zone creation - Additional configuration items

6. In the Input Information Verification area, after reviewing the landing zone configuration information and Service Permissions, check the agreement for permissions and guidelines.

7. Click the Create button. 7. A popup window notifying the creation of a landing zone opens.

8. After reviewing the information about creating a landing zone, click the Confirm button. 8. Landing zone creation request has been completed.

   • Creating a landing zone takes some time, and a notification is sent when the task is completed.
   • When the landing zone creation is complete, you can view the full menu of Cloud Control and the organization status on the Service Home page.

Check detailed landing zone information

On the Landing Zone Settings page, you can view detailed information about the landing zone.

To view the detailed information of the landing zone, follow these steps.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Landing Zone Settings menu. 2. Go to the Landing Zone Settings page.

   Category	Detailed description
   service	Service Name
   Resource Type	Resource Type
   SRN	Unique resource ID in Samsung Cloud Platform In Cloud Control, it refers to the SRN of the resource type
   Resource name	Resource Name
   Resource ID	Unique resource ID in the service
   constructor	User who created the service
   Creation timestamp	Service creation date and time
   Editor	User who edited the service information
   Modification date	Service information modification timestamp
   Home region	Landing zone home region information
   Account access configuration	How to manage access to an Account
   Trail configuration	Trail configuration enable status active maintain state
   Detection guardrail	Detection guardrail activation status Active: Create diagnostic for Accounts under the registered organizational unit and enable scheduling Display detection guardrail pricing plan, checklist, diagnostic frequency, and start time information Inactive: Delete diagnostics for all Accounts within the organizational unit Click the Edit button to change the activation status Changes cannot be canceled after request
   Delete landing zone	Delete the landing zone For detailed information on deleting the landing zone, see 랜딩 존 삭제하기

   Table. Landing zone configuration items

Delete Landing Zone

If the landing zone creation fails or is not used, you can delete the landing zone.

To delete the landing zone, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Landing Zone Settings menu. 2. Go to the Landing Zone Settings page.
3. On the Landing Zone Settings page, click the Delete Landing Zone button. 3. Landing Zone Deletion a popup window opens.
4. Delete Landing Zone In the popup window, enter the displayed Cloud Contorl ID in the deletion confirmation area, then click the Confirm button. 4. The landing zone deletion request has been completed.
   • While deleting a landing zone, an explanation about the landing zone deletion process is displayed on the Service Home page.

Managing Organizational Units and Accounts

You can view the list of organizational units and accounts, register them in Cloud Control, and manage them. To view and manage organizational units and the Account list, follow these steps.

1. All Services > Management > Cloud Control Click the menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Organization menu. 2. Go to the Organization Unit and Account Management page.
3. Organization Unit and Account Management page, select the view mode at the top right.
   • Click the View Hierarchy button to view and manage organizational units and Accounts in a hierarchical structure.

     Category	Detailed description
     Create a sub-organization unit	Add a new organizational unit under the selected organizational unit Enabled only when a single organizational unit is selected in the hierarchy For more details, see Create an organizational unit
     More	Manage organization units or register a new Account Organization unit: Ability to delete, register, or re-register organization units, and apply or remove detective guardrails For detailed information on managing organization units, see 조직 단위 관리하기 For detailed information on detective guardrails, see 탐지 가드레일 Account: Ability to register or unregister an Account For detailed information on registering and unregistering Accounts, see Account 관리하기
     Organization unit/Account name	Display the organization unit and Account names in a hierarchical structure format +, - buttons can be clicked to expand or collapse the hierarchy Clicking an organization unit/Account name navigates to the detail page
     ID/Email	The organization unit displays the ID, and the Account shows the ID and email.
     Status	Cloud Control registration status for an organization unit or Account Registered, Unregistered, Registering, Registration Failed No status displayed when Root
     Register organization unit	Cloud Control registration status of sub-organizational units displayed as registered organizational unit count / total organizational unit count
     Register Account	Cloud Control registration status of sub Account’s Number of registered Accounts / total Accounts displayed as
     Detection guardrail	Detection guardrail application status for organizational units or sub-units

     Table. Hierarchy view items
   • Account List View: You can view and manage the list of Accounts that constitute Cloud Control.

     Category	Detailed description
     Account registration	Register the selected Account from the Account list to Cloud Control Selecting an Account in the Unregistered or Registration Failed state from the Account list activates it For more details on Account registration, refer to Account 등록하기
     More > Unregister Account	Unregister the selected Account from the Account list When you select an Account in the registered or registration failed state from the Account list, it is enabled Shared Accounts cannot be unregistered For more information on Account deregistration, see Account 등록 해제하기
     Account name	Account name
     Account ID	Account ID
     email	User email of the account
     Status	Cloud Control registration status for organization units or accounts Registered, Unregistered, Registering, Registration failed Root when no status is displayed

     Table. Account list view items
   • Account Creation When the button is clicked, you can create a new Account. * For more details, refer to Account 생성하기.

View organization and account details

You can view and edit the detailed information of organizational units and accounts. To view detailed information about the organization unit and Account, follow these steps.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Organization menu. 2. Navigate to the Organization Unit and Account Management page.
3. Click the View hierarchy button on the Organization unit and Account management page.
4. Click the name of the resource to view its details in the hierarchical list. 4. Navigate to the detailed page of the resource.
   • Root: Go to the Root Details page. * Please refer to Root Detailed Information for detailed information.
   • Organization unit name: Organization unit details Visit the page. For detailed information, please refer to 조직 단위 상세 정보.
   • Account name: Go to the Account details page. * For more details, refer to the Account 상세 정보.

Root detailed information

Root Details page lets you view and manage the organization Root’s detailed information and its subordinate Account list. Root Details page consists of Basic Information, Sub Account tab.

Basic Information

You can view the basic information about the organization Root, as well as the organizational units and the number of accounts registered in Cloud Control.

Sub Account

You can view and manage the list of Accounts under the Root and the Cloud Control registration status.

Organization Unit Detailed Information

Organization Unit Details page allows you to view and manage the organization unit’s detailed information, subordinate Accounts, and the applied preventive and detection guardrails. Organization Unit Detail page consists of Basic Information, Sub Account, Preventive Guardrails, Detection Guardrails tabs.

Basic Information

You can view basic and detailed information about the organization unit.

Sub Account

You can view and manage the list of sub-accounts within an organizational unit.

Preventive Guardrail

You can view and manage the list of preventive guardrails applied at the organizational level.

Detection Guardrail

You can view and manage the diagnostic results of detection guardrails applied at the organizational level.

Check account detailed information

Account Details page allows you to view the account’s detailed information and the list of applied preventive guardrails. Account Details page consists of Basic Information and Preventive Guardrails tabs.

Basic Information

You can view basic and detailed information about the organization unit.

Preventive Guardrail

You can view the list of preventive guardrails applied to the Account.

Check Access Portal connection information

User and Access page allows you to view the Access Portal connection URL and connection methods (password, SSO, MFA).

To check the Access Portal login information, follow these steps.

1. All Services > Management > Cloud Control menu, please click. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the User and Access menu. 2. Go to the User and Access page.
3. Check the information in the Integrated Access Management area of the User and Access page.

   Category	Detailed description
   Access type	Method for accessing the Access Portal
   Access Portal URL	Access Portal URL for accessing When the URL is clicked, the Access Portal login page opens in a new tab You can log in using the ID login credentials from ID Center
   Permission set	A collection of administrator policies used by ID Center to determine the valid permissions of users who can access a specific account.

   Table. Shared Account item

Check user credential information

On the User and Access page, you can view the user credential source type and the ID Center ID.

To check the user credential information, follow the steps below.

1. Click the All Services > Management > Cloud Control menu. 1. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the User and Access menu. 2. Navigate to the User and Access page.
3. Check the information in the User Credential Management area of the User and Access page.

   Category	Detailed description
   Credential source	Credential source types configured in ID Center ID Center’s own directory: Directory within ID Center AD (Active Directory): Active Directory managed directly by the user
   ID Center ID	ID Center’s ID when the ID is clicked, navigate to the ID Center Settings page
   User group	A group formed to classify workers who perform specific tasks in an organization

   Table. User Credential Management Items

Setting up Cloud Control notification policy

In Cloud Control, you can configure it to generate notifications to the organization administrator when events such as configuration changes or audit results occur.

To configure a notification policy, follow these steps.

1. Click the All Services > Management > Notification Manager menu. 1. Navigate to the Notification Group List page of Notification Manager.
2. On the Notification Group List page, click the Notification Policy menu. 2. Go to the Notification Policy List page.
3. On the Alert Policy List page, click the Create Alert Policy button. 3. Navigate to the Create Notification Policy page.
4. On the Create Notification Policy page, enter the information required to create the service and select detailed options.

   Category	Required status	Detailed description
   Whether to use	required	Use of notification policy ON: Enabled OFF: Disabled
   Notification policy name	required	Alert policy name Enter within 30 characters
   Explanation	Select	Enter a description of the notification policy Enter within 1,000 characters
   Notification item	required	Select all events that trigger notifications [Cloud Control] Baseline Assignment: when events related to organization units or Accounts occur [Cloud Control] Guardrail: when guardrail-related events occur [Cloud Control] Landing Zone: when Cloud Control is created or terminated, or when landing zone-related events occur
   Notification target group	required	Select the notification group to deliver the notification When you select a notification group, the group name is displayed at the top Select or deselect the notification group name

   Table. Notification policy creation items

5. After setting the required information, click the Complete button.
   • When creation is complete, check the created alert policy on the Alert Policy List page.