1. In the VMware Cloud on AWS portal click the OPEN NSX MANAGER button

2. Click ACCESS VIA THE INTERNET to connect to NSX Manager UI

3. Wait till page with NSX Manager will be loaded and you will see Overview dashboard.
4. Click on Inventory tab

5. Click Groups in the left pane
6. Click Compute Groups
7. Click ADD GROUP
8. Name: PhotoAppVM
9. Click the Set link

10. In the popup, Select Members Tab
11. From the Drop Down change the Category from Groups to Virtual Machines
12. Check the box next to webserver01 and webserver02
13. Click Apply
14. Click Save

1. If your NSX Manager UI tab is active then go to step #3. If you already closed NSX Manager tab then Select your SDDC, if you aren't currently within it, then click View Details
2. Click the OPEN NSX MANAGER button and click ACCESS VIA THE INTERNET to connect to NSX Manager UI. Wait till page with NSX Manager will be loaded and you will see Home - Overview dashboard.
3. Click Security tab in your NSX Manager UI
4. Click Gateway Firewall in the left pane
5. Click and select Compute Gateway
6. Click +ADD RULE
7. Click on the "New Rule" Text and enter AWS Inbound
8. Hover over the Source field and click on the blue Edit Pencil 
9. In the popup, Select Connected VPC Prefixes
10. Click Apply
11. Hover over the Destination field and click on the blue Edit icon
12. In the popup, Select PhotoAppVM
13. Click Apply
14. Leave Service as Any
15. Leave applied to as All Uplinks
16. REPEAT STEPS: 4 - 13 to create an additional rule with the following changes:
    • Name: AWS Outbound
    • Source: PhotoAppVM  
    • Destination: Connected VPC Prefixes
    • Service: MySQL
17. REPEAT STEPS: 4 - 13 to create a third rule with the following changes:
    • Name: Public In
    • Source: Any 
    • Destination: PhotoAppVM
    • Services: HTTP
18. To the far right of each rule click the GEAR
19. Slide the Slider in the Dialog to enable logging
20. Click APPLY
21. Click PUBLISH to save and activate the rules

1. In your vCenter interface for VMware Cloud on AWS, find your Webserver01 VM you deployed, and ensure it has been assigned an IP address as shown in the graphic.
2. Take note of the IP address (Record the IP in the Excel Workbook provided)

3. Go back to your NSX Manager UI on the Networking tab in order to request a Public IP address
4. Click Public IPs in the left pane
5. Click on REQUEST NEW IP
6. In the notes area type PhotoAppIP
7. Click SAVE
8. Take note of and record this Public IP address

1. Click NAT in the left pane
2. Click ADD NAT RULE
3. Name:  PhotoApp NAT 
4. Public IP: From Task 3 (it should auto populate, but if it does not, select it)
5. Service:  All Traffic (no change)
6. Internal IP: <IP address of your Webserver01 VM you noted in task 2.1> See your Excel workbook for this IP if you've forgotten it
7. Logging: YES (Move the Slider to the right)
8. Click SAVE

On your browser, open a new tab and go to: https://vmcexpert{#}.signin.aws.amazon.com/console where {#} indicates your AWS environment (1, 2 or 3)

The Credentials below are from the AWS Console portion of your student lab assignment sheet

1. Account ID or alias:  vmcexpert# i.e vmcexpert1, vmcexpert2 or vmcexpert3
2. IAM user name:        VMCEXPERT#-XX(where # is your Environment ID and XX is the number assigned to you)
3. Password:                 <AWS Console PW provided By your instructor> 
4. Click Sign In

5.  Make sure the region selected is US West (Oregon) us-west-2 If you are using vmcexpert1 or vmcexpert2 environments or chose Europe (Frankfurt) eu-central-1, if your using vmcexpert3 or your instructor instructs you to do so.
6. Expand the Services drop down
7. Select  Database
8. Select RDS 

9. In the Amazon RDS left pane click on Databases
10. Search for your student number (i.e. 01 through 31)
11. Click the blue text under the DB Identifier column for the RDS instance that corresponds to your designated student number
12. Ensure that you are on the Connectivity & Security Tab.
13. Look inside the Security subsection at the Public Accessibility details.  You may need to scroll down
14. Note the name and click on the link under VPC Security Groups

15.  Check the box next to your security group ie. VMCEXPERT#-XX-RDS-Inbound (may not match your student number).
16. Click on the Inbound rules tab in the pane below
17. Review the Inbound rules, and note that your PhotoAppVM should be allowed access to TCP Port 3306
18. Click Outbound rules tab
19. You can see All traffic (internal to AWS) is allowed; this includes your VMware Cloud on AWS SDDC logical networks.

1. Click on the Services drop down to go back to the Main Console
2. Click on Compute
3. Click on EC2

4. Under Network & Security in the left panel click on Network Interfaces. (you may have to scroll down)
5. Type RDS in the search area and press Enter to add a filter
6. Expand the Security Group name column to see the names
7. Find your VMCEXPERT#-XX-RDS-Inbound security group corresponding to your student number and check the box on the left (Don't click on the blue link)
8. Once selected, look in the details pane below to find the Private IPv4 address.  (you may have to scroll down)
9. Copy this address to your notes for the next step

1. Click the VMC on AWS browser Tab and Click the Open vCenter button
2. Click Show Credentials
3. Copy the password and click Open vCenter
4. Log into vCenter as:
   • Username: [email protected]
   • Password: {Your_Saved_CloudAdmin_Password_From_Step_3}
5. Click on  webserver01 in the Inventory on the left (you may have to expand the inventory)
6. Click on Launch Web Console
7. In the webserver01 browser tab, log into the Virtual Machine as:
   • Login: root
   • Password: VMware1!

7. In the webserver01 Console, navigate to the Lychee application directory make a copy of the .env file and open it in an editor by typing the following commands

9. With the environment file opened, modify the following values:
   • App_URL:  {Replace_the_IP_With_the IP_address_of your_WebServer01} 
   • DB_HOST:    {Replace_the_IP_with_the_IP_address_of_the_RDS_DB}  NOTE: This IP was recorded in Task 6, Step 9 
   • DB_PASSWORD: {AWS_Console_Password_Provided_By_your_Instructor}

10. Press CTRL+O, then Enter to save the changes
11. Press CTRL+X to close the file

12. In a new browser tab, type/paste in the Public IP Address you requested in Task 3 Step 6
    and used for your NAT rule in Task 4
13. In the Lychee Installer Wizard, Click Next

14. Click Next on the requirements page
15. Click Next on the Permissions page
16. Review the values in the Environment page to confirm the values you entered in step 9 are correct (you may have to scroll to see all the values)
17. Click Install (An error message is expected, as we are not migrating an old database.)

18. From your smartphone, tablet or In a new browser window type/paste in the Public IP Address of your webserver01. This is the IP requested in Task 3 Step 8
19. Create an Application admin account by entering the following:
    • New Username: admin
    • New Password: {AWS_Console_Password_Provided_By_your_Instructor}
    • Confirm Password:{AWS_Console_Password_Provided_By_your_Instructor}
20. Click Create Login

21. In the webserver01 VM Console Browser tab, Type the following command

22. In the Lychee application browser window, click the Public folder
23. In the upper right-hand corner, Click the "+" icon
24. Click Upload Photo, and upload a few images

25. In the webserver01 VM Console Browser tab, Type the following command to confirm the files were stored on the local filesystem