CloudWrangler docs

Infrastructure Diagram

Visual infrastructure map with traffic flows from VPC Flow Logs

Overview

The Infrastructure Diagram shows your AWS resources and how they communicate with each other based on VPC Flow Logs data.

Requirements: VPC Flow Logs must be enabled. The diagram only shows resources that have traffic flows or load balancer connections.

What It Shows

Infrastructure Diagram

The diagram displays:

  • Resources with network traffic (EC2, RDS, Load Balancers, ElastiCache, etc.)
  • Traffic flows between resources
  • Load balancer target group connections
  • Cost optimization opportunities for each resource

Note: Resources without traffic won't appear in the diagram.

Understanding the Diagram

Resource Nodes

Each resource is shown as a card with:

  • Icon: Indicates resource type (server, database, load balancer, etc.)
  • Resource Name: From tags or resource ID
  • Resource Type: e.g., "ec2 instance", "rds instance"
  • Cost Savings Badge: Shows potential monthly savings if cost findings exist

All nodes are the same size. The diagram arranges resources in tiers:

  • Top tier: Load balancers, NAT gateways, Internet gateways
  • Middle tier: EC2 instances
  • Bottom tier: RDS databases, ElastiCache clusters

Traffic Flow Lines

Lines between resources represent network traffic:

Line Style:

  • Solid lines: Traffic flows from VPC Flow Logs
  • Dashed lines: Load balancer target group connections (architectural relationships)

Line Color:

  • Purple: Bidirectional traffic (traffic flowing both ways)
  • Slate gray: Unidirectional traffic (traffic flowing one way)

Line Thickness:

  • Thicker lines = more data transferred
  • Calculated logarithmically based on total bytes

Line Labels:

  • Port number and total data transferred (e.g., :443 • 1.2 GB)

Arrows:

  • Unidirectional traffic shows arrow pointing to destination
  • Bidirectional traffic shows no arrows

Resource Details Panel

Click any resource to see detailed information.

Resource Details Panel

The panel shows:

Basic Information:

  • Resource ID
  • Private IP address
  • Resource type

Traffic Statistics:

  • Inbound traffic (total bytes received)
  • Outbound traffic (total bytes sent)
  • Rejected connections count (if any)

Cost Optimization:

  • Potential monthly savings
  • List of cost findings with descriptions
  • Click any finding to view full details

Connected Resources:

  • List of all resources connected to this one
  • Direction of traffic (→ or ←)
  • Data transferred or port number

Traffic Flow Details

Click any line to see traffic flow information:

For Traffic Flows:

  • Source and destination resource names
  • Total data transferred
  • Number of rejected connections
  • Individual flow details (protocol, ports, packets, connection count)

For Target Group Connections:

  • Load balancer and target resource
  • Target group name
  • Health status (healthy/unhealthy)
  • Target port and protocol

Controls

Use ReactFlow controls to navigate:

  • Mouse wheel: Zoom in/out
  • Click and drag: Pan around the diagram
  • Click resource/line: View details
  • Click background: Deselect
  • Use the control panel in bottom-left for fit view and zoom controls

Update Frequency

The diagram refreshes every 6 hours with new VPC Flow Logs data. Click the "Refresh" button to manually reload.

Next Steps

On this page