IBM Watson platform updates.

In September 2018, IBM Watson Services announced support for IBM Cloud Identity and Access Management (IAM). The introduction of Resource Groups and finer-grained access control allowed users to ensure that the right individuals had control over their service instances.

Today, we continue that progress by announcing full support for IAM with Watson services and better support for network isolation.

Full support for Identity Access Management

API keys for Watson services are no longer limited to a single service instance. You can create access policies and keys that apply to many services and can grant access between them.

To support this change, the API service endpoints use a different domain and include the service instance ID. The new URL pattern is as follows:


Example of new Watson Assistant API endpoint hosted in Dallas, Texas:–45e1–8c54–22d6ed92r32q

Beginning in December 2019, you will start to see these new URLs as you create service instances or when you add service credentials.

But, don’t worry. These URLs do not introduce a breaking change because they will work for both your existing service instances and for new instances. The original URLs continue to work on your existing service instances for at least one year.

More information: Authenticating to Watson services

Public-private network endpoints

As enterprises move their workloads to the public cloud, how you secure access comes into focus. Premium Plan users will gain access to both public and private network endpoints. Connections to private network endpoints will not need public internet access.

Private network endpoints support routing services over the IBM Cloud private network instead of the public network. The addition of private service endpoints will provide your applications with the following:

  • Instance-specific private URLs, reducing the amount of network traffic traversing over a public network.
  • Reduced cost with unlimited inbound and outbound traffic on the private network—there is no egress when the traffic flows over a private network endpoint.
  • Reduced latency and increased security for traffic to Watson Services as data stays within the IBM Cloud network.

Read more about how IBM Service Endpoints work.

Enabling private network endpoints

Users looking to adopt private network endpoints will need to make sure they are on the Premium Plan for their Watson service. As seen in the GIF below, a user can switch between public and private endpoints in three easy steps.

  • Step 1: Enable Virtual Routing and Forwarding on your IBM Cloud Account.
  • Step 2: Navigate to your service instance that is on a Premium plan and click the Manage tab.
  • Step 3: Click Add private network endpoint link to enable access to a private service URL.

Current Premium users can make use of Private Endpoints in their existing service instances. For more information, see Public-Private Network Endpoints.


More from Announcements

IBM TechXchange underscores the importance of AI skilling and partner innovation

3 min read - Generative AI and large language models are poised to impact how we all access and use information. But as organizations race to adopt these new technologies for business, it requires a global ecosystem of partners with industry expertise to identify the right enterprise use-cases for AI and the technical skills to implement the technology. During TechXchange, IBM's premier technical learning event in Las Vegas last week, IBM Partner Plus members including our Strategic Partners, resellers, software vendors, distributors and service…

Introducing Inspiring Voices, a podcast exploring the impactful journeys of great leaders

< 1 min read - Learning about other people's careers, life challenges, and successes is a true source of inspiration that can impact our own ambitions as well as life and business choices in great ways. Brought to you by the Executive Search and Integration team at IBM, the Inspiring Voices podcast will showcase great leaders, taking you inside their personal stories about life, career choices and how to make an impact. In this first episode, host David Jones, Executive Search Lead at IBM, brings…

IBM watsonx Assistant and NICE CXone combine capabilities for a new chapter in CCaaS

5 min read - In an age of instant everything, ensuring a positive customer experience has become a top priority for enterprises. When one third of customers (32%) say they will walk away from a brand they love after just one bad experience (source: PWC), organizations are now applying massive investments to this experience, particularly with their live agents and contact centers.  For many enterprises, that investment includes modernizing their call centers by moving to cloud-based Contact Center as a Service (CCaaS) platforms. CCaaS solutions…

See what’s new in SingleStoreDB with IBM 8.0

3 min read - Despite decades of progress in database systems, builders have compromised on at least one of the following: speed, reliability, or ease. They have two options: one, they could get a document database that is fast and easy, but can’t be relied on for mission-critical transactional applications. Or two, they could rely on a cloud data warehouse that is easy to set up, but only allows lagging analytics. Even then, each solution lacks something, forcing builders to deploy other databases for…