Welcome to CloudWrangler

What is CloudWrangler?

CloudWrangler is a comprehensive AWS infrastructure management platform that helps you optimize costs, visualize your network topology, and analyze traffic patterns across your AWS accounts.

Key Features

Cost Optimization

• Identify idle and underutilized resources
• Get actionable recommendations to reduce AWS spending
• Track potential savings over time
• Prioritized findings with implementation guidance

Network Visualization

• Interactive VPC topology diagrams
• Visual infrastructure maps showing all your resources
• Traffic path analysis between resources
• Security group and route table verification

Traffic Analysis

• Real-time VPC Flow Logs analysis
• Identify top talkers and bandwidth usage
• Search and filter network traffic
• Detect rejected connections and security issues

Infrastructure Diagrams

• Visual infrastructure maps showing all your resources
• See which resources communicate with each other
• Powered by VPC Flow Logs to reveal actual traffic patterns
• Interactive diagrams with real-time traffic data

How It Works

CloudWrangler connects to your AWS accounts using a secure, read-only IAM role:

1. Deploy IAM Role - Install a CloudFormation template in your AWS account
2. Connect Account - Add your AWS account to CloudWrangler
3. Automatic Discovery - CloudWrangler discovers all your resources
4. Cost Analysis - Get immediate cost savings recommendations
5. Visualize - View interactive diagrams of your infrastructure
6. Enable Flow Logs - Optional: Analyze network traffic patterns

Why CloudWrangler?

Save Money

Automatically identify cost savings opportunities across your entire AWS infrastructure. Most customers find 15-30% in potential savings within the first scan.

Understand Your Network

Complex VPC architectures become clear with visual topology maps. See exactly how your resources are connected and identify connectivity issues.

Analyze Traffic

With VPC Flow Logs enabled, understand who's talking to whom, detect security anomalies, and troubleshoot connectivity problems.

Stay Secure

Read-only access means CloudWrangler can never modify your infrastructure. All access uses IAM role assumption with External ID protection.

Getting Started

Architecture Overview

CloudWrangler is built on modern cloud-native technologies:

• AWS Athena: All VPC Flow Logs queries run directly in your AWS account using Athena. This means your flow log data never leaves your AWS environment - we simply execute queries on your behalf and retrieve the results. You pay AWS directly for Athena query costs based on data scanned.
• Database: PostgreSQL with Row-Level Security (RLS) ensures complete data isolation between workspaces. RLS policies automatically filter all queries so users can only access data from their own workspace, providing secure multi-tenancy at the database level.
• CloudFormation: Infrastructure as Code templates make it easy to deploy the read-only IAM role and optional VPC Flow Logs configuration in your AWS accounts.

Security First

Security is our top priority:

• Read-Only Access - IAM roles use AWS managed ReadOnlyAccess policy
• External ID Protection - Prevents confused deputy attacks
• No Credentials Stored - We never store AWS access keys
• Multi-Tenancy - Row-Level Security isolates workspace data
• Audit Trail - All AWS API calls appear in your CloudTrail

What's Next?

Ready to get started? Follow our Quick Start Guide to connect your first AWS account and start discovering cost savings.

Have questions? Check out our AWS Integration Guide to learn more about how CloudWrangler connects to your accounts.

Want to explore features? Browse our Features Documentation to see what CloudWrangler can do for you.