SOC Command Center - Cumin Cloud Platform Case Study
9-service SOC platform deployed on Cumin via MCP Features: SIEM, SOAR, Honeypot, IDS/IPS, Firewall, UBA, Threat Intel, Vuln Scanner (real targets), Incident Management Architecture: 2-app consolidated deployment (backend + gateway)
هذا الالتزام موجود في:
40
walkthrough.md
Normal file
40
walkthrough.md
Normal file
@@ -0,0 +1,40 @@
|
||||
# Walkthrough: SOC Platform Deployment & Evaluation
|
||||
|
||||
## Summary of Accomplishments
|
||||
|
||||
We have successfully executed the master deployment plan on the **Cumin Platform**. This involved deploying an entire Next-Generation Security Operations Center (SOC), testing the limits of the platform's Free Tier quotas, evaluating its advanced API endpoints, and building a breathtaking modern UI for the dashboard.
|
||||
|
||||
### 1. Quota Compliance & Service Consolidation
|
||||
To adhere strictly to the 10-app limit per project on the Cumin Free Tier:
|
||||
- We successfully refactored the original 10 backend microservices down to 8 by merging the `soc-incident` and `soc-compliance` services into a single, unified `soc-ops` service.
|
||||
- The deployment executed perfectly, resulting in exactly **9 apps** (8 backend services + 1 Gateway) and **1 Postgres Database**.
|
||||
|
||||
### 2. Advanced Cumin Feature Testing
|
||||
During Phase 1.5 of the deployment script, we programmatically tested Cumin's advanced administrative APIs using the provided token. Here are the results:
|
||||
- **Secrets API (`/secrets`)**: Resulted in `access denied` (403).
|
||||
- **Constellations API (`/constellations`)**: Resulted in `access denied` (403).
|
||||
- **Pull Secrets API (`/pull-secrets`)**: Resulted in `404 page not found`.
|
||||
- **Network Policy API (`/network-policies`)**: Resulted in `404 page not found`.
|
||||
> [!NOTE]
|
||||
> These results confirm that while the basic compute and storage primitives work flawlessly, the advanced networking and secret management APIs either require a higher-tier token or use different unlisted endpoints.
|
||||
|
||||
### 3. Gateway Dashboard Overhaul
|
||||
We completely redesigned the Gateway UI to feel like a premium, enterprise-grade Next-Generation SOC.
|
||||
- **Glassmorphism Design**: Implemented backdrop filters, sleek dark mode aesthetics, and a vibrant but professional color palette.
|
||||
- **Architecture Visualization**: Integrated **Mermaid.js** directly into the frontend, rendering a dynamic, interactive architecture diagram of the entire system right in the browser.
|
||||
- **Zero-Config Discovery**: The Gateway queried the Cumin API during its build phase, discovering the public `.hosted.cumin.dev` URLs of all the backend microservices automatically.
|
||||
|
||||
### Screenshots
|
||||
|
||||
````carousel
|
||||
|
||||
<!-- slide -->
|
||||
|
||||
````
|
||||
|
||||
## Verification
|
||||
- ✅ **Deployment script (`deploy.js`) ran to completion without errors.**
|
||||
- ✅ **All 9 applications achieved `running` status.**
|
||||
- ✅ **Gateway UI loads and correctly fetches `/health` and `/stats` from backend endpoints.**
|
||||
|
||||
The system is now fully live and the requested evaluations are thoroughly documented.
|
||||
المرجع في مشكلة جديدة
حظر مستخدم