# Douklar

> A self-hosted workspace for moving ECR images, S3 objects, CodeCommit repositories and DynamoDB items between AWS accounts and Regions. Map what goes where, check it, run it, and keep a record of every run.

Douklar is self-hosted only (no SaaS, no hosted demo) and a developer preview. It moves four resource types: ECR, S3, CodeCommit and DynamoDB. Moves are one-time runs, not continuous replication. Nothing is sold on this site.

Every docs page in one file: https://douklar.app/llms-full.txt

## Douklar
- [Overview](https://douklar.app/): what Douklar does, the workflow, the four services
- [Amazon ECR](https://douklar.app/services/ecr): Container images. Selected tags with their full OCI referrer graph: indexes, SBOMs, attestations
- [Amazon S3](https://douklar.app/services/s3): Objects. Missing or changed objects
- [AWS CodeCommit](https://douklar.app/services/codecommit): Git repositories. Branches and tags, as a mirror or incremental push
- [Amazon DynamoDB](https://douklar.app/services/dynamodb): Table items. Items that are missing from an existing table
- [Use cases](https://douklar.app/moves): the jobs Douklar is built for
- [Account split](https://douklar.app/moves/account-split): Move one team's images, buckets, repositories and tables out of a shared account into its own.
- [New landing zone](https://douklar.app/moves/landing-zone): Fill new accounts from the old ones, app by app.
- [Stage to production](https://douklar.app/moves/stage-to-production): Promote a tested image and the assets it needs into the production account in one run.
- [Carve-out or merger](https://douklar.app/moves/carve-out): Move data between accounts that share no Organization and no owner.
- [One-time recovery copy](https://douklar.app/moves/recovery-copy): Copy selected data once into a separate recovery account. For a copy that stays current, use native replication.
- [Cutover checklist](https://douklar.app/moves/checklist): before, during and after a move
- [Douklar and native ECR and S3 replication](https://douklar.app/compare/native-replication): Replication keeps a destination current with every new push or write; Douklar moves what already exists, once.
- [Douklar and AWS Backup](https://douklar.app/compare/aws-backup): AWS Backup keeps restorable copies inside one Organization; Douklar moves selected data between accounts that may not share one.
- [Douklar and DataSync and S3 Batch Operations](https://douklar.app/compare/datasync): DataSync and S3 Batch Operations move very large amounts of storage; Douklar joins S3 with images, repositories and items in one run.

## Tools
- [Douklar](https://douklar.app/): Self-hosted workspace for moving ECR images, S3 objects, CodeCommit repositories and DynamoDB items between AWS accounts and Regions. Licence: AGPL-3.0-or-later.
- [SSM Explorer](https://douklar.app/developers/ssm-explorer): Search, browse, diff and export AWS SSM Parameter Store parameters from your terminal. Read-only. Licence: MIT.
- [Agent Workspace](https://douklar.app/developers/agent-workspace): A Terraform module for a personal AI agent workspace on AWS, reached through Session Manager with no open ports. Licence: Apache-2.0.

## Douklar docs
- [Overview](https://douklar.app/md/douklar/overview.md): What Douklar is, what it moves, how a move works, and what it deliberately does not do.
- [Quick start: your first move](https://douklar.app/md/douklar/quick-start.md): From install to a recorded run in Activity, one S3 bucket from one account to another, in about ten minutes.
- [Install locally](https://douklar.app/md/douklar/install.md): Run the Douklar stack on one Linux host with Docker, then sign in to the console.
- [Accounts and credentials](https://douklar.app/md/douklar/accounts-and-credentials.md): One profile per AWS account, its credentials, and the checks that keep them valid.
- [Discovery and mappings](https://douklar.app/md/douklar/discovery-and-mappings.md): Find the resources in each account and map each source to its destination.
- [Preflight and Review](https://douklar.app/md/douklar/preflight-and-review.md): The read-only checks that run before any write, and the review step that lists what will be written.
- [Running a sync](https://douklar.app/md/douklar/running-a-sync.md): How a reviewed run is queued, executed, verified and retried.
- [Activity and evidence](https://douklar.app/md/douklar/activity-and-evidence.md): The durable record of every run, and how to re-run or retry from it.
- [S3 Batch Operations](https://douklar.app/md/douklar/s3-batch-operations.md): The dedicated console for large S3 copies with AWS S3 Batch Operations, from readiness to completion report.
- [Hand a change to the other account's admin](https://douklar.app/md/douklar/hand-over-to-the-other-account.md): When a move needs a permission in an account you do not run, Douklar shows the exact statement for that account's admin to apply.
- [Sign-in with ZITADEL or Cognito](https://douklar.app/md/douklar/sign-in-zitadel-or-cognito.md): Choose the identity provider for the console, set the values Douklar reads, and map your admin group.
- [Use an external PostgreSQL (RDS, Supabase)](https://douklar.app/md/douklar/external-postgresql.md): Keep Douklar's state in Amazon RDS, Supabase or another PostgreSQL instead of the local container.
- [The douklar CLI](https://douklar.app/md/douklar/cli.md): Plan and run syncs, manage config and verify ECR mappings from a terminal.
- [Console map](https://douklar.app/md/douklar/console-map.md): Every area of the web console, what you do there, and which role can open it.
- [Configuration and environment variables](https://douklar.app/md/douklar/configuration.md): The files Douklar reads and the environment variables an operator sets most often, with their defaults.
- [AWS permissions per service](https://douklar.app/md/douklar/aws-permissions.md): What each profile needs in AWS, read and write, for discovery, preflight and each kind of move.
- [Error codes](https://douklar.app/md/douklar/error-codes.md): The error codes the console's API returns, with the HTTP status, whether a retry can help, and what to do.
- [Limits](https://douklar.app/md/douklar/limits.md): Ceilings, timeouts and known gaps that bound what a run can do.
- [Glossary](https://douklar.app/md/douklar/glossary.md): The words Douklar uses, and what each one means in the product.
- [How a run works](https://douklar.app/md/douklar/how-a-run-works.md): What happens between pressing Run and reading the record: the queue, the worker, the states a run can end in, and where the bytes go.
- [Troubleshooting](https://douklar.app/md/douklar/troubleshooting.md): Symptom, check, fix for the problems the install and the first runs meet most often.

## SSM Explorer docs
- [Install](https://douklar.app/md/ssm-explorer/install.md): Install SSM Explorer with Poetry and put the ssm-explorer command on your PATH.
- [Commands](https://douklar.app/md/ssm-explorer/commands.md): list, search, get, diff, export, browse and deepsearch, with examples.
- [Configuration](https://douklar.app/md/ssm-explorer/configuration.md): The config file, its precedence, per-profile Regions and fetch strategy.

## Agent Workspace docs
- [Quick start](https://douklar.app/md/agent-workspace/quick-start.md): Deploy the workspace with Terraform and open a session through Session Manager.
- [Scheduling](https://douklar.app/md/agent-workspace/scheduling.md): Start and stop the instance on time windows, with modes you can change from a tag at runtime.
- [Secrets and access](https://douklar.app/md/agent-workspace/secrets-and-access.md): Inject API keys through SSM Parameter Store, and reach the instance through Session Manager or Tailscale.
- [Backups and costs](https://douklar.app/md/agent-workspace/backups-and-costs.md): Optional snapshots, AMIs and patching, and a budget alert.
- [Inputs and outputs](https://douklar.app/md/agent-workspace/reference.md): The main inputs and outputs. The Terraform Registry has the complete list.

## Optional
- [Tutorials](https://douklar.app/tutorials): step-by-step learning paths for each tool
- [Releases](https://douklar.app/releases): release notes for every tool
- [Licensing](https://douklar.app/licensing)
- [Security](https://douklar.app/security): report vulnerabilities to douklar@hummatovic.com
- [About](https://douklar.app/about): created by Hummatovic
- [Request a platform](https://douklar.app/request): Douklar starts with AWS; ask for the cloud platform or service you need next
- [Colophon](https://douklar.app/colophon): how this site is made