Lucidchart now allows you to import your AWS infrastructure to easily create diagrams that represent your AWS architecture.
Our AWS import is an add-on offered on Pro, Team, and Enterprise accounts. To purchase the add-on, please submit a sales request.
To import your AWS architecture into Lucidchart, click the “Import” button on the Documents page and select the “AWS Architecture” option.
To import your AWS infrastructure into Lucidchart via API, follow these steps:
- Create an IAM user with the stated policy. We suggest creating a new user for your Lucidchart import credentials and adding an inline policy to that user. The inline policy will allow you to easily control or revoke access as needed. OR, if it is not possible to create an IAM user, you can use a command line script. Choose “AWS CLI Script.”
- Enter the IAM keys for the newly created user manually, OR upload a CSV or config file to enter the keys. Then select the region you wish to use for the AWS import. Currently, Lucidchart only supports the import of one region per document.
Note about security: Lucidchart does not save these credentials and only uses them once at the time of import. You’ll need to add your credentials again for every document you create. We hope this procedure reduces any security concerns.
- Import your AWS architecture.
Once you have imported your AWS architecture, you can create your diagram using the imported objects. To create your diagram, follow these steps:
- Once you have imported your AWS architecture, a list of custom shapes that represent everything in your environment will appear on a separate left-hand panel below your shape library menu. Use the “Search” feature to search by component name and/or tag. You can also filter the list to display specific types of components. Our standard AWS shapes will also be available to you by clicking “M” on your keyboard and checking the box next to the desired shape library.
- Drag and drop components from the list to create your diagram.
- Notice that a line is automatically created, based on networking rules, between shapes as new shapes are added to the canvas.
- View any metadata attached to the shape by selecting the shape and then clicking the “Data” icon in the bottom right-hand corner.
- Click the “+T” symbol to add shape data to the shape.
- Looking back at the canvas, you can also click the “+” sign to examine the shape’s connected components. You can filter the list in terms of how traffic flows from that shape: “Incoming” lists all components that send traffic inbound to the selected component, and “Outgoing” lists all components that receive traffic from the selected component.
Why is there a connection between two items I didn’t expect to be connected?
Lucidchart’s AWS import draws connections based on security groups and subnets, and it looks for ports to be open on both sides of a connection. If you see connections you don’t expect between items, it’s likely that the items have open ports between them. For example, one item may have a port open to send traffic to all IPs, and the other item may have the same port open to receive traffic from all IPs.
Why don’t you make the diagram completely automatic?
Trust us—we’ve thought this one through. The first version of Lucidchart’s AWS import tool built diagrams automatically, but customer feedback showed that our users didn’t find it helpful to create such large, complex diagrams. The current iteration of the tool provides all the resources for users to choose from, including the correct icons, names, tags, and all other metadata. This version allows users to quickly create diagrams for their specific use cases without any of the tedious work of typing out names or copying and pasting information from the AWS console.
Why are some of my instances not showing up?
Lucidchart represents instances within autoscaling groups with the autoscaling group itself, rather than show each individual instance, as they would all have the same connections. You can still see the instance IDs for those instances in the “Shape Data” panel.
How do I give Lucidchart access to my AWS architecture?
In order for Lucidchart to access your AWS infrastructure, you’ll need to give Lucidchart the credentials for a new IAM user with an inline policy. For an overview of how to create an IAM user with an inline policy, check out this article.
Can I export my AWS diagram?
Yes! Click File > Download As. You can now download your diagram as a CSV file. Choose “CSV for Shape Data” and a CSV will be exported with a row for every shape, page and layer.