How-to guides

Using Cloud Control

The user must first create a landing zone to use the Cloud Control service. When a landing zone is created, you can use the management features of Cloud Control.

Create Landing Zone

To use Cloud Control in the Samsung Cloud Platform Console, you must first create a landing zone.

To create a landing zone, follow these steps.

1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.

2. On the Service Home page, click the Create Landing Zone button. You will be taken to the Create Landing Zone page.

3. After setting the configuration items in the Rate Review and Organizational Unit Configuration area, click the Next button.

   Category	Required status	Detailed description
   Home region	-	Home region of Cloud Control Cloud Control sets the default region as the home region and it cannot be changed All regions except the default region are managed by Cloud Control
   Basic organizational unit	Required	Enter the default organizational unit within the landing zone Case-sensitive English letters, enter up to 128 characters The default organizational unit includes shared Account (Log Account, Audit Account) Security: Default organizational unit name of the shared Account Can be modified after creating the landing zone
   Additional organizational unit	Required	Enter additional organizational unit within the landing zone Case-sensitive English letters, up to 128 characters Can be added after creating the landing zone

   Table. Landing zone creation - cost review and organizational unit configuration items

4. After setting the configuration items in the Shared Account Configuration area, click the Next button.

   Category	Required status	Detailed description
   Management Account	-	The Management Account name is displayed and cannot be edited.
   Log Account	Required	Enter Log Account Information Account name: Use Korean, English, numbers, spaces, and special characters (+=-_@[](),.) to enter within 3 to 30 characters Email, Confirm Email: Enter up to 60 characters in a valid email address format
   Audit Account	Required	Enter Log Account information Account name: Korean characters, English letters, numbers, spaces, special characters(+=-_@[](),.) within 3 to 30 characters Email, Confirm Email: Enter up to 60 characters in a valid email address format Cannot use the same email as Log Account

   Table. Landing zone creation – shared account configuration items

   Reference

   • Log Account is a repository of logs for API activity and resource configuration collected from all Accounts. Log Account cannot be changed.
   • The Audit Account is a restricted account, allowing the security and compliance team to obtain access rights to all accounts within the organization through the Audit Account.

5. After setting the configuration items in the Additional configuration area, click the Next button.

   Category	Required status	Detailed description
   Account Access Configuration	Required	Select a method to manage access to the Account Account access via ID Center Create preconfigured groups and permission sets to configure users who perform specific tasks in the Account Automatically assign users when provisioning an Account with the Account Factory or registering an existing Account Selectable only when using ID Center’s own directory Self-managed Account access Cloud Control does not create directory groups or permission sets for the landing zone Automatically assign users when provisioning an Account with the Account Factory or registering an existing Account Manage access to the Account through ID Center or other Account access methods
   Trail configuration	-	Automatic configuration in progress
   Detection Guardrail	Selection	Select whether to enable detection guardrails When detection guardrails are enabled, they apply only to the default organizational unit Even after creating a landing zone, settings can be changed on the Landing Zone Settings page For more information about detection guardrails, refer to Detective Guardrail

   Table. Landing zone creation - additional configuration items

6. In the Input Information Confirmation area, after checking the landing zone configuration information and Service Permissions, check the agreement on permissions and guidelines.

7. Click the Create button. A popup notifying the creation of the landing zone opens.

8. After reviewing the information about creating a landing zone, click the Confirm button. The landing zone creation request will be completed.

   • Creating a landing zone takes some time, and a notification is sent when the process is complete.
   • When the landing zone creation is completed, you can view the full menu of Cloud Control and the organization status on the Service Home page.

View detailed information of the landing zone

On the Landing Zone Settings page, you can view detailed information about the landing zone.

Follow these steps to view the detailed information of the landing zone.

1. Click the All Services > Management > Cloud Control menu. Go to the Service Home page of Cloud Control.
2. On the Service Home page, click the Landing Zone Settings menu. You will be taken to the Landing Zone Settings page.

Delete Landing Zone

If the landing zone creation fails or is not used, you can delete the landing zone.

To delete a landing zone, follow these steps.

1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.
2. On the Service Home page, click the Landing Zone Settings menu. You will be taken to the Landing Zone Settings page.
3. On the Landing Zone Settings page, click the Delete Landing Zone button. The Delete Landing Zone popup will open.
4. Landing Zone Deletion popup, after entering the displayed Cloud Contorl ID in the deletion confirmation field, click the Confirm button. The landing zone deletion request will be completed.
   • While deleting a landing zone, an explanation about the landing zone deletion process is displayed on the Service Home page.

Managing Organizational Units and Accounts

You can view the organization units and account list, register them in Cloud Control, and manage them.

To view and manage organizational units and the Account list, follow these steps.

1. Click the All Services > Management > Cloud Control menu. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the Organization menu. You will be taken to the Organization unit and Account management page.
3. Organizational Unit and Account Management page, select the view mode in the top‑right corner.
   • When you click the View Hierarchy button, you can view and manage organizational units and Accounts in a hierarchical structure.

     Category	Detailed description
     Create a subordinate organizational unit	Add a new organizational unit under the selected organizational unit Enabled only when a single organizational unit is selected in the hierarchy For more details, refer to Creating an Organizational Unit
     More	Manage organization units or register a new Account Organization Unit: Ability to delete/register/re-register organization units, and apply/remove detection guardrails For detailed information on organization unit management, see Managing Organization Units reference For detailed information on detection guardrails, see Detection Guardrails reference Account: Ability to register/unregister an Account For detailed information on Account registration and deregistration, see Account Management reference
     Organization unit/Account name	Display the names of organizational units and Accounts in a hierarchical structure Click the +, - buttons to expand or collapse the hierarchy Click an organizational unit or Account name to navigate to its detail page
     ID/Email	Organization units display ID, and Account displays ID and email.
     status	Cloud Control registration status of an organization unit or Account Registered, Not registered, Registering, Registration failed No status displayed when Root
     Register organization unit	Cloud Control registration status of sub-organizational units number of registered organizational units / total number of organizational units displayed
     Register Account	Cloud Control registration status of sub Accounts displayed as Number of registered Accounts / Total number of Accounts
     Detection Guardrail	Detection guardrail application status for an organization unit or sub‑organization unit

     Table. Hierarchy view items
   • View Account List: You can view and manage the list of Accounts that make up Cloud Control.

     Category	Detailed description
     Account registration	Register the selected Account from the Account list to Cloud Control When you select an Account in Unregistered, Registration Failed status from the Account list, it becomes active For detailed information on Account registration, refer to Register Account
     More > Unregister Account	Deregister the selected Account from the Account list When you select an Account in the Account list that is in registered, registration failed status, it becomes enabled Shared Accounts cannot be deregistered For more details on Account deregistration, refer to Account Deregistration
     Account name	Account name
     Account ID	Account ID
     email	Account user email
     status	Cloud Control registration status of an organization unit or Account Registered, Unregistered, Registering, Registration Failed No status displayed when Root

     Table. Account list view items
   • Account creation button click creates a new Account. For more details, see Create Account.

Check organization and Account detailed information

You can view and edit the detailed information of the organization unit and Account. To view detailed information about the organization unit and Account, follow these steps.

1. Click the All Services > Management > Cloud Control menu. Navigate to the Service Home page of Cloud Control.
2. Service Home page, click the Organization menu. Navigate to the Organization unit and Account management page.
3. Click the View Hierarchy button on the Organizational Unit and Account Management page.
4. Click the name of the resource whose details you want to view in the hierarchical list. You will be taken to the resource’s detail page.
   • Root: Go to the Root Details page. For more information, see Root Details Information.
   • Organization unit name: Organization unit details Go to the page. For more information, see Organization unit details.
   • Account name: Account details page. For more details, see Account details.

Root detailed information

Root Details page allows you to view and manage the detailed information of the organization Root and the list of subordinate Accounts. Root Details page consists of Basic Information, Sub Account tabs.

Basic Information

You can view the basic information of the organization Root, as well as the organizational units and the number of accounts registered in Cloud Control.

Sub Account

You can view and manage the list of Accounts under the Root and the registration status of Cloud Control.

Organizational Unit Detailed Information

Organizational Unit Details page allows you to view and manage the unit’s detailed information, subordinate Accounts, applied preventive guardrails, and detection guardrails. Organization Unit Detail page consists of Basic Information, Sub Account, Preventive Guardrails, Detection Guardrails tabs.

Basic Information

You can view basic and detailed information about the organization unit.

Sub Account

You can view and manage the list of subordinate Accounts within an organizational unit.

Preventive Guardrail

You can view and manage the list of preventive guardrails applied at the organizational level.

Detection Guardrail

You can view and manage the diagnostic results of detection guardrails applied at the organizational level.

Check detailed account information

Account Details page allows you to view the account’s detailed information and the list of applied preventive guardrails. Account Details page consists of the Basic Information and Preventive Guardrails tabs.

Basic Information

You can view basic and detailed information about the organization unit.

Preventive Guardrail

You can view the list of preventive guardrails applied to the Account.

Check Access Portal connection information

User and Access page allows you to view the Access Portal connection URL and login methods (password, SSO, MFA).

To check the Access Portal connection information, follow these steps.

1. Click the All Services > Management > Cloud Control menu. You will be taken to the Service Home page of Cloud Control.
2. On the Service Home page, click the User and Access menu. You will be taken to the User and Access page.
3. Check the information in the User and Access page’s Integrated Access Management area.

Check user credential information

User and Access page allows you to view the user credential source type and ID Center ID.

To verify user credential information, follow these steps.

1. Click the All Services > Management > Cloud Control menu. Navigate to the Service Home page of Cloud Control.
2. On the Service Home page, click the User and Access menu. You will be taken to the User and Access page.
3. Check the information in the User and Access page’s User Credentials Management area.