Security-rich capability is integrated into IBM Cloud® Virtual Server for VPC at the instance level, at the storage level and at the subnet level.
To attain a more granular level of security, you can use security groups, network access control lists or both.
A security group is a collection of rules that specify whether to allow traffic for an associated VSI. It acts as a virtual firewall that controls the traffic for one or more servers.
While IBM Cloud VPC does not provide end-to-end encryption, it allows for it. You can attach a floating IP so that nothing in the connection path forces a decryption.