CloudMapper Documentation
CloudMapper Documentation
Network Diagramming tool for Architects, Security and Compliance teams, and DevOps Engineers
CloudMapper is a Network Diagramming tool designed for AWS Architects, Security and Compliance teams, and DevOps Engineers. Delivered as a secure AMI via AWS Marketplace, it automatically discovers and visualizes your AWS network topology with zero configuration required.
Example network diagram generated by CloudMapper
No secrets or keys required! Instance auto-detects its region and uses EC2 instance role with minimal permissions (arn:aws:iam::aws:policy/ReadOnlyAccess and arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore).
Supports multiple regions within a single account. Configure additional regions via the web interface - they'll appear in the dashboard dropdown.
SSH disabled by default. Recommended access via AWS Systems Manager (SSM). Optional hardened SSH with ec2-user for Marketplace scanning. Administrators can force 2FA or configure OIDC SSO integration.
FIPS 140-2 enabled AMI built on Amazon Linux 2023 for government and enterprise compliance requirements.
Available through AWS Marketplace in commercial regions. GovCloud support planned for government customers.
Generate network diagrams for your System Security Plans (SSP) and compliance reports with professional export options.