All pages
Powered by GitBook
1 of 1

Loading...

6 - Tenant and Admin Just-In-Time (JIT) AWS Access

Using JIT to access the AWS Portal from DuploCloud

JIT Access from the DuploCloud Portal

Navigate to User -> Profile to view options for obtaining JIT credentials with the JIT AWS Console button.

This method uses Tenant-level AWS permissions.

CLI

DuploCloud uses duplo-jit to access the CLI. You can use duplo-jit to retrieve Tenant-scoped temporary credentials.

Documentation for installation and setup can be found .

Accessing the AWS CLI for Admin and Tenant Scopes

Accessing Kubectl

Administrators can obtain a cluster-wide kubeconfig file by navigating to Administrator -> Infrastructure.

Select the Infrastructure, and in the EKS tab, click the Download Kube Config button.

here
The JIT AWS Console button on the Profile page
The kubeconfig file downloaded from DuploCloud
[profile duplo-prod]
region=us-west-2
credential_process=duplo-jit aws --admin --host https://prod.duplocloud.net --interactive
[profile test-04]
region=us-west-2
credential_process=duplo-jit aws -tenant devab01 --host https://test04.duplocloud.net --interactive