Loading security overview...
🏗️ Generate Infrastructure Code
Upload your architecture diagram to generate IaC
Select Output Format
IaC generation costs 10 credits
Upload Architecture Diagram
Drag & drop or click to upload (JPG, PNG, WebP)
OR
📁 Upload Your Terraform Files for Security Scan
Terraform security scan costs 2 credits
Drop Terraform Files Here
or click to browse (.tf files or .zip archive)
Code-to-Diagram synthesis with security badges costs 2 credits
REVERSE ARCHITECTURE ENGINE
Transform Infrastructure Code into Live Architecture Topologies
Paste any Terraform HCL or CloudFormation template. CloudLens AI parses VPCs, subnets, instances, and databases, maps topology connections, performs automated security audits (encryption, public ingress, multi-AZ resilience), and injects compliance badges directly into Draw.io diagram nodes.
Or drag & drop a .tf, .yaml, or .json file
🔍 New Assessment
Choose how you want to assess your architecture
Analyze Diagram
Upload an architecture diagram image for AI analysis.
- ✅ Security & Reliability Checks
- ✅ Diagram Validation
- 💰 1-3 Credits
Live AWS Scan
Scan your connected AWS account for configuration issues.
- ✅ Real Configuration Data
- ✅ Deep Security & Cost Analysis
- 💰 10 Credits
☁️ Live AWS Assessment PREVIEW
Select a Well-Architected Pillar to scan (5 Credits)
🔍 Azure Assessment
Choose how you want to assess your Azure architecture
Analyze Diagram
Upload an Azure architecture diagram for AI analysis.
- ✅ Security & Reliability Checks
- ✅ Azure Best Practices Validation
- 💰 1-3 Credits
Live Azure Scan
Scan your connected Azure subscription using Azure Advisor recommendations.
- ✅ Azure Advisor Insights
- ✅ Cost, Security & Performance
- ✅ Real-time Recommendations
- 💰 10 Credits
🔷 Azure Advisor Assessment
Select a pillar to view Azure Advisor recommendations
Advisor Score:
--
🔷 Azure Well-Architected Framework
Select a pillar to assess your architecture
AWS Well-Architected Framework
Select a pillar to assess your architecture
📜 Compliance Assessment
Select a compliance framework and upload your architecture diagram
Select Compliance Framework
PCI DSS
Payment Card Industry
HIPAA
Healthcare
SOC 2
SaaS / Tech
ISO 27001
Enterprise Security
NIST 800-53
Government
CIS Benchmarks
Technical Hardening
⚠️ Architecture Readiness Assessment - not a formal audit. Full compliance requires policy documentation and formal verification.
Security Assessment
Upload your architecture diagram for analysis
Select Analysis Mode
Drop your architecture diagram here
or click to browse
Supports: JPEG, PNG, GIF, WebP (Max 10MB)
💰 Cost Analysis
Upload an architecture diagram to estimate monthly AWS infrastructure costs
1
Upload
2
Configure
3
Analyze
Service scan is free · Cost analysis uses 2 credits
Upload Architecture Diagram
Drag & drop or click to upload your AWS architecture diagram (JPG, PNG, WebP)
CLOUDLENS STUDIO / AWS
One decision at a time.
Describe the workload, choose each architecture tier with guidance, then confirm a validated design before generating deliverables.
◉ US East · N. Virginia
Guided architecture builder
Logical design · No resources deployed
STEP 1 · WORKLOAD INTENT
What are you building?
Start with the closest workload or choose a Solution Blueprint such as Clickstream Analytics or Event-Driven Document & Media Processing.
STEP 2 · DESIGN CONTEXT
Tell us what matters
These inputs shape the recommendation, compatibility rules, design warnings, and modeled cost.
STEP 3 · DEPLOYMENT BOUNDARY
Place the workload safely
Choose whether AWS manages the network boundary or the workload runs in explicit private subnets. This decision is carried into the diagram, cost model, linter, and Terraform.
ARCHITECTURE TIER
Service choices
FINAL STEP · REVIEW & CONFIRM
Your proposed architecture
Review every selected tier, known limitation, and cost assumption. Return to any tier before confirming.
MONTHLY PLANNING RANGE
Confidence-scored estimate—USD / month
See rate calculations, range drivers & assumptions
Design review
DETERMINISTIC RESILIENCE REVIEW
Test the blast radius
Select a failure to see affected services, surviving paths and remediation.
SCENARIO WORKSPACE
Save and compare revisions
Store a baseline in this browser, continue designing, then compare service, finding and cost changes.
Explore the next move
Architecture glossary
- RTO
- Target time to restore the business capability.
- RPO
- Maximum acceptable data-loss window.
- Planning range
- Deterministic estimate using versioned static rates and the entered usage assumptions.
- Derived dependency
- A supporting component introduced by the selected services or network boundary.
- Design hash
- Immutable fingerprint connecting the specification, review, diagram, and implementation artifacts.
DECISION TRACE
Why recommendations changed
No requirement or service changes in this session.
📐 "What-If" Architecture & Cost Simulator
Explore modernization choices and estimated cost trade-offs before writing code
⚡ Model-based cost estimates
✨ Free Interactive Sandbox
How to Use the What-If Simulator
3-step guide to testing architectures, modernizing instances, and cutting cloud TCO
1
Select a Baseline
Choose a starter architecture below (or bridge your custom code from the Bi-Directional Canvas). Estimated baseline cost and illustrative pillar scores load immediately.
2
Click a Modernization Recipe
Test Graviton ARM64 migration, Edge Shield with WAF, Aurora Serverless v2, or S3 Intelligent-Tiering with zero risk and 0 credits used.
3
Inspect Deltas & Export
Review estimated cost changes and illustrative pillar score changes. Download the updated Draw.io diagram or synthesize Terraform code directly.
STEP 1
Choose Architecture Baseline
Select a starter template or use your loaded configurationSTEP 2