---
title: "Tutorials"
description: "Index of step-by-step tutorials for Calico Cloud features, ingress and egress policy, enterprise tier controls, and Kubernetes networking fundamentals."
product: "Calico Cloud"
version: "v23.0.1"
section: "Tutorials"
canonical_url: "https://docs.tigera.io/calico-cloud/tutorials/"
---

# Tutorials

Learn more about Calico Cloud and Kubernetes network policy.

## Calico Cloud features

##### [Web console tutorial](https://docs.tigera.io/calico-cloud/tutorials/calico-cloud-features/tour.md)

[Step-by-step tutorial for the Calico Cloud web console interface, walking the left navbar from dashboards to policy, observability, threat defense, and image scanning.](https://docs.tigera.io/calico-cloud/tutorials/calico-cloud-features/tour.md)

##### [Service Graph tutorial](https://docs.tigera.io/calico-cloud/tutorials/calico-cloud-features/service-graph.md)

[Step-by-step tutorial for the Calico Cloud Service Graph that visualizes pod, service, and namespace communication across a managed cluster.](https://docs.tigera.io/calico-cloud/tutorials/calico-cloud-features/service-graph.md)

##### [Understanding network sets](https://docs.tigera.io/calico-cloud/tutorials/calico-cloud-features/networksets.md)

[Step-by-step tutorial for using network sets and global network sets in Calico Cloud to model external endpoints and reuse IP and domain lists in policy.](https://docs.tigera.io/calico-cloud/tutorials/calico-cloud-features/networksets.md)

## Secure ingress and egress for applications

##### [Secure egress access from workloads to destinations outside the cluster](https://docs.tigera.io/calico-cloud/tutorials/applications/egress-controls.md)

[Step-by-step tutorial for restricting application egress in Calico Cloud using network sets, domain wildcards, and global network sets with network policy.](https://docs.tigera.io/calico-cloud/tutorials/applications/egress-controls.md)

##### [Secure ingress access to a microservice or application](https://docs.tigera.io/calico-cloud/tutorials/applications/ingress-microservices.md)

[Step-by-step tutorial for writing Calico Cloud network policies that grant ingress access to a microservice from internal clients, services, and load balancers.](https://docs.tigera.io/calico-cloud/tutorials/applications/ingress-microservices.md)

## Implement enterprise security controls

##### [Namespace isolation and access controls](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/namespace-isolation.md)

[Step-by-step tutorial for isolating namespaces in Calico Cloud using global network policies with Pass rules in a security tier across business units and environments.](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/namespace-isolation.md)

##### [Global egress access controls](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/global-egress.md)

[Step-by-step tutorial for building cluster-wide egress access controls in Calico Cloud using global network sets, domains, and team-scoped policy.](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/global-egress.md)

##### [Global default deny policy](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/default-deny.md)

[Step-by-step tutorial for staging and rolling out a global default-deny policy in Calico Cloud so unwanted ingress and egress is blocked across the cluster.](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/default-deny.md)

##### [Platform application access controls](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/platform.md)

[Step-by-step tutorial for securing platform-tier applications in Calico Cloud with ingress and egress controls for storage, secrets, and monitoring workloads.](https://docs.tigera.io/calico-cloud/tutorials/enterprise-security/platform.md)

## Kubernetes networking for beginners

##### [What is network policy?](https://docs.tigera.io/calico-cloud/tutorials/training/about-network-policy.md)

[Reference primer for the Calico Cloud tutorials covering the basics of Kubernetes and Calico network policy and when to choose each policy API.](https://docs.tigera.io/calico-cloud/tutorials/training/about-network-policy.md)

##### [Kubernetes services](https://docs.tigera.io/calico-cloud/tutorials/training/about-kubernetes-services.md)

[Reference primer for the Calico Cloud tutorials covering the three Kubernetes service types and how services interact with network policy.](https://docs.tigera.io/calico-cloud/tutorials/training/about-kubernetes-services.md)

##### [Kubernetes ingress](https://docs.tigera.io/calico-cloud/tutorials/training/about-kubernetes-ingress.md)

[Reference primer for the Calico Cloud tutorials covering Kubernetes ingress implementations and how ingress controllers interact with network policy.](https://docs.tigera.io/calico-cloud/tutorials/training/about-kubernetes-ingress.md)

##### [Kubernetes egress](https://docs.tigera.io/calico-cloud/tutorials/training/about-kubernetes-egress.md)

[Reference primer for the Calico Cloud tutorials covering Kubernetes egress, NAT outgoing, egress gateways, and why restricting outbound pod traffic matters.](https://docs.tigera.io/calico-cloud/tutorials/training/about-kubernetes-egress.md)

## Kubernetes tutorials and demos

##### [Kubernetes policy, demo](https://docs.tigera.io/calico-cloud/tutorials/kubernetes-tutorials/kubernetes-demo.md)

[Step-by-step tutorial for running the stars demo in Calico Cloud to visualize how Kubernetes network policy allows and denies frontend, backend, and client traffic.](https://docs.tigera.io/calico-cloud/tutorials/kubernetes-tutorials/kubernetes-demo.md)

##### [Get started with Kubernetes network policy](https://docs.tigera.io/calico-cloud/tutorials/kubernetes-tutorials/kubernetes-network-policy.md)

[Step-by-step tutorial for learning Kubernetes network policy concepts with Calico Cloud, covering ingress, egress, selectors, and policy enforcement.](https://docs.tigera.io/calico-cloud/tutorials/kubernetes-tutorials/kubernetes-network-policy.md)

##### [Kubernetes policy, basic tutorial](https://docs.tigera.io/calico-cloud/tutorials/kubernetes-tutorials/kubernetes-policy-basic.md)

[Step-by-step tutorial for writing a basic Kubernetes network policy in Calico Cloud to restrict pod-to-pod traffic using namespaces, labels, and selectors.](https://docs.tigera.io/calico-cloud/tutorials/kubernetes-tutorials/kubernetes-policy-basic.md)

##### [Kubernetes policy, advanced tutorial](https://docs.tigera.io/calico-cloud/tutorials/kubernetes-tutorials/kubernetes-policy-advanced.md)

[Step-by-step tutorial for writing advanced Kubernetes network policies in Calico Cloud, including namespace-scoped rules and default deny for ingress and egress.](https://docs.tigera.io/calico-cloud/tutorials/kubernetes-tutorials/kubernetes-policy-advanced.md)