Generate an AWS architecture diagram.
It reads your infrastructure as files rather than by connecting to your account, which means it needs no credentials and works against environments you cannot reach.
It reads files, not your account
There is no credential field and that is deliberate. Terraform, CloudFormation, CDK output, or the JSON from a describe command all work, and any of them can be diagrammed from a laptop with no access to the account in question. A tool that asks for production read access to draw a picture is asking for a great deal in return for very little, and it also cannot help you with an environment you are not permitted to reach.
How AWS resources become components
Services map onto tiers in the way people already think about them: CloudFront, API Gateway and load balancers at the edge; EC2, ECS, EKS and Lambda in the application tier; RDS, DynamoDB, S3 and ElastiCache in data; SQS, SNS and EventBridge drawn as the edges they are rather than as boxes traffic passes through. VPC and subnet structure becomes grouping rather than nodes, because a diagram in which the network is boxes is a network diagram, which is a different picture.
Why the layout can be trusted
The agent reads the files listed above and emits a semantic graph: components, the tier each belongs to, and the edges between them, with no coordinates anywhere. The ELK layout engine then computes positions and orthogonal edge routing. This is why the output cannot come back with boxes overlapping or arrows crossing through cards, which is the usual failure when a language model is asked to place things on a canvas itself.
Official icons, offline
Service logos are bundled with the app rather than fetched, so diagrams render identically with no network at all. That matters more than it sounds: a diagram that silently loses its icons in an air-gapped environment or on a plane is a diagram you cannot rely on for a review.
Nothing leaves your machine
It runs on your machine. With a local Ollama model nothing leaves the laptop at all, and with your own API key the file contents go to the provider you chose and never through us. For a source that is your actual codebase, that distinction is usually the deciding one.
AWS services to diagram tiers
| Service | Tier |
|---|---|
| CloudFront, Route 53 | Edge |
| API Gateway, Application Load Balancer | Edge |
| EC2, ECS, EKS, Fargate | Application |
| Lambda | Application, drawn as a function |
| RDS, Aurora, DynamoDB | Data |
| S3, EFS | Data |
| ElastiCache | Data |
| SQS, SNS, EventBridge, Kinesis | Edges between components |
| Cognito, IAM | An authentication boundary |
| VPC, subnets, security groups | Grouping and notes, not nodes |
The prompt
Questions
Does it need AWS credentials?
No. Everything is read from files on disk, so it works with no account access at all.
Can it diagram what is actually running rather than what is declared?
Indirectly: export a description with the CLI and point it at that output. It will not fetch it for you, which keeps the credentials question entirely on your side.
Does it use official AWS icons?
It uses bundled service icons that render offline. Some newer or more obscure services fall back to a generic glyph rather than the exact mark.
What about Azure and GCP?
The same, from the equivalent configuration. AWS has its own page because it is what most people search for, not because the others are less supported.
Related
- Generate a Diagram from a MonorepoThe hard part of diagramming a monorepo is not reading it, it is deciding what to leave out.
- Generate a Diagram from a Python ProjectPython projects hide their structure in decorators and imports, both of which are readable and neither of which is visible from a directory listing.
- Generate a Diagram from a TypeScript ProjectTypeScript projects usually have a real structure and a directory layout that obscures it, mostly because everything is a file that exports something.
- Generate a Diagram from a Go ProjectGo's package structure is unusually honest, which makes it one of the better languages to read architecture out of.
Last updated