Workshops allow you to gain hands-on experience with DuploCloud in an interactive environment with instructor-led training. You'll learn about:

• The DuploCloud engagement and onboarding process

• How DuploCloud deploys a cloud infrastructure

• How an application is deployed in DuploCloud

• DuploCloud's simplified approach to DevOps, security, and compliance

• Logging and monitoring features in DuploCloud, including the Advanced Observability Suite (AOS)

Follow the steps in this section to create a cloud Infrastructure and deploy and expose your application to the web using the DuploCloud Portal.

Using the user ID and URL provided by the workshop instructor, log in to the DuploCloud Portal using SSO with either Microsoft or Google.

The steps in this section provide an overview of DuploCloud features and tools to ensure the stability, performance, and scalability of your cloud infrastructure.

Navigate to Kubernetes -> Services -> [select nginx service].

In the Containers tab, click the Actions icon ( ) next to the nginxcontainer and select Container Shell or Host Shell.

Additionally, you can access a kubectlshell scoped to this Tenant's Kubernetes Namespace by clicking the Kubectl button.

Navigate to Cloud Services -> Database -> RDS -> Add. The Create a RDS page displays.

• Name: [add -demo to the name DuploCloud pre-populates]

• RDS Engine Version: MySQL 8.0.39

• RDS instance size: db.t3.small

• User name: demo

• User password: W5i6Uv6LQtyApVyJDrAq

Click Create.

Navigate to Administrator -> Billing to view billing across your AWS account.

Navigate to Cloud Services -> Billing to view the cost per Tenant.

View container logs

Navigate to Kubernetes -> Services -> [select nginx service]

In the Containers tab, click the Actions icon ( ) next to the nginxcontainer and select Logs.

Enable Log Collection for Tenant

Navigate to Administrator -> Observability -> Standard -> Settings -> Logging tab. Select the Tenant for which you want to enable logging and click Update.

View Logging with OpenSearch

Navigate to Observability > Standard > Logging.

Logs are segregated by Tenant and then by Service.

Navigate to Observability -> Audit. The Audit page displays.

Here is an example of the details of an audit event.

JIT Access from the DuploCloud Portal

Navigate to User -> Profile to view options for obtaining JIT credentials with the JIT AWS Console button.

CLI

DuploCloud uses duplo-jit to access the CLI. You can use duplo-jit to retrieve Tenant-scoped temporary credentials.

Documentation for installation and setup can be found here.

Accessing the AWS CLI for Admin and Tenant scopes

[profile duplo-prod]
region=us-west-2
credential_process=duplo-jit aws --admin --host https://prod.duplocloud.net --interactive

[profile test-04]
region=us-west-2
credential_process=duplo-jit aws -tenant devab01 --host https://test04.duplocloud.net --interactive

Accessing kubectl

Administrators can obtain a cluster-wide kubeconfigfile by navigating to Administrator -> Infrastructure.

Select the Infrastructure, and in the EKS tab, click the Download Kube Config button.

Summary

To better support our customers and their approach to infrastructure, automation, security, and compliance, this workshop enables AWS teams to familiarize themselves with DuploCloud

In this workshop, we:

• Review what DuploCloud is and how we engage with customers.

• Deploy infrastructure.

• Deploy an application.

• Review how DuploCloud simplifies DevOps, security, and compliance.

• Introduce DuploCloud’s logging and monitoring features.

Customer setup

In preparation for the workshop, the DuploCloud team will do the following for you:

• Install DuploCloud in an AWS account.

• Grant Administrator access to the DuploCloud Portal.

• Define users and associated role-based access to the DuploCloud Portal.

Optional pre-event reading list

• Quick Start Guide

• Platform Demo (5 minutes)

• DuploCloud AWS Platform documentation

• Just-In-Time (JIT) Access

Your DuploCloud deployment will remain active for 3 days after the workshop to allow you to continue exploring the DuploCloud capabilities.

As you explore the DuploCloud Portal, browse the DuploCloud documentation to learn more about product features and capabilities.

Browse the pages in this section for more information about DuploCloud's comprehensive DevSecOps suite of tools and services.

SIEM

Navigate to Security -> SIEM.

Security Dashboard

Navigate to Security -> Standards.

Navigate to Kubernetes -> Services -> Add Service. The Add Service page displays.

• Name: nginx

• Docker image: nginx:latest (this is a sample public image)

Click Next, and then click Create.

Navigate to Cloud Services -> Storage -> S3 and click Add. The Create an S3 Bucket pane displays.

Enter a Name for your S3 Bucket and click Create.

Once your bucket is created, select the S3 Bucket to open the Details page. From this page, click the Console button.

This opens the AWS S3 console using Just-In-Time (JIT) credentials, allowing you to work with the bucket in AWS.

To create an EKS Worker Node, navigate to Cloud Services -> Hosts -> Add. The Add Host page displays.

Friendly Name: host01

After clicking Add, wait until the Status displays Running and Fleet displays Connected.

To create a Tenant, navigate to Administrator -> Tenants -> Add. The Create a Tenant pane displays.

• Name: dev[YOUR_INITIALS]01 (For example, devab01)

• Plan: non-prod (Specifying the Plan associates the new Tenant with the Infrastructure you created earlier)

Click Create.

This may take around 2 minutes. You may see a generated fault in Administrator -> Faults or the exclamation (!) icon displayed in the top right during provisioning.

Once it’s ready, select your new Tenant using the Tenant drop-down list box at the top of the screen.

Navigate to Kubernetes -> Services and select the nginxService from the list.

Click Load Balancers -> Configure Load Balancer. The Add Load Balancer Listener pane displays.

• Type: Application LB

• Container port: 80

• External port: 443

• Visibility: Public

• Application mode: Docker Mode

• Health check: /

• Backend protocol: HTTP

• Certificates: WILDCARD.test04-apps.duplocloud.net

Click Add and wait until the Service is Running and the Load Balancer displays a status of Ready.

Enable HTTP to HTTPs Redirect

Navigate to Kubernetes -> Services and select the nginxService.

Click Load Balancers. On the Other Settings card, click Edit. Enable the HTTP to HTTPS redirect option.

You can find the created DNS Name displayed on this page, CNAME'd to your Load Balancer name. Copy and paste the URL in the DNS Name card into your browser address to verify your application is available with a Status of Running. It may take a few minutes for the application to start.

Here is a sample Reference Architecture that uses the DuploCloud Terraform Provider.

DuploCloud Terraform can be generated from existing DuploCloud Tenants.

Enable Metric Collection for Tenants

Navigate to Administrator -> Observability -> Basic -> Settings -> Monitoring Tab.

Select the Tenant for which you want to enable metrics and click Update.

Viewing Metrics

Navigate to Observability -> Basic -> Metrics.

Thanks for attending our AWS Workshop!

Read DuploCloud whitepapers for comprehensive information about:

If you have questions or need assistance, feel free to contact us:

• Connect the DuploCloud support team via Slack, or Teams

• Email support@duplocloud.net

• DuploCloud Terraform Provider Documentation

• DuploCloud Terraform Provider Source Code

• Example Terraform Project (Collaboration between DuploCloud and the AWS SaaS Factory team)

Creating the Alert

Navigate to Observability -> Alerts -> Add. The Create Alert pane displays.

• Resource Type: EC2

• Resource: [select a previously created EC2 instance]

Click Next to proceed with defining metrics data.

Defining metrics data

After clicking Next, continue defining the metrics data:

• Metric Name: CPUUtilization

• Statistic: Average

• Operator: >=

• Threshold: 75

• Period: 5 Minutes

• Severity: Critical

Click Create.

Set the Alarm with a Third-Party Integration

Navigate to Observability -> Faults -> Update Notifications Config. The Set Alert Notifications Config pane displays.

If instructed, enter additional data and click Update to set the alarm.

In the DuploCloud Portal, navigate to Administrator -> Infrastructure -> Add and enter the following details:

• Name: non-prod

• Region: us-west-2

• VPC CIDR: 10.221.0.0/16

• Subnet CIDR Mask: 24

• Availability Zones: 2

• Select the Enable EKS option

This takes about 20 minutes. Once it’s ready, double-check that a DuploCloud Plan (Administrator -> Plans) has been created with the same name (non-prod).

Click the tiles below to access the DuploCloud CI/CD documentation and the GitHub Actions repository.