Supported AWS resources

This list comes straight from the renderer’s resource registry. Types not listed here are skipped, and the rest of the plan still renders. Only the hashicorp/aws provider is supported today.

A resource appears in the lenses listed for it. It can also appear in another lens when it connects to something there, for example a Lambda function in the Data lens next to the table it reads.

Drawn as shapes

Networking

Resource type	Lenses
aws_vpc	Network · Compute · Data · Security
aws_subnet	Network · Compute · Data · Security
aws_internet_gateway	Network
aws_nat_gateway	Network
aws_ec2_transit_gateway	Network
aws_vpc_endpoint	Network · Security
aws_route_table	Network
aws_db_subnet_group	Network
aws_lb	Network · Compute · Security
aws_lb_target_group	Network · Compute
aws_cloudfront_distribution	Network

Compute

Resource type	Lenses
aws_instance	Network · Compute
aws_autoscaling_group	Compute
aws_ecs_cluster	Compute
aws_ecs_service	Compute
aws_eks_cluster	Network · Compute · Data · Security
aws_lambda_function	Compute

Data

Resource type	Lenses
aws_db_instance, aws_rds_instance	Data
aws_rds_cluster, aws_rds_cluster_instance	Data
aws_db_proxy	Data
aws_dynamodb_table	Data
aws_elasticache_cluster, aws_elasticache_replication_group	Data
aws_memorydb_cluster	Data
aws_redshift_cluster	Data
aws_docdb_cluster, aws_docdb_cluster_instance	Data
aws_neptune_cluster, aws_neptune_cluster_instance	Data
aws_opensearch_domain, aws_elasticsearch_domain	Data
aws_keyspaces_table	Data
aws_qldb_ledger	Data
aws_timestreamwrite_database, aws_timestreamwrite_table	Data
aws_s3_bucket	Data
aws_s3_object, aws_s3_bucket_object	Data
aws_efs_file_system	Data
aws_ebs_volume	Data

Security

Resource type	Lenses
aws_security_group, aws_default_security_group	Security
aws_network_acl, aws_default_network_acl	Security
aws_wafv2_web_acl, aws_waf_web_acl	Network · Security

Used for connections and details

These types aren’t drawn as shapes of their own. They supply the edges, labels and placement that make the diagram correct.

Resource type	What it contributes
aws_route, aws_route_table_association	Routes, subnet routing summaries, and public or private classification
aws_ec2_transit_gateway_vpc_attachment	Transit gateway to VPC connections
aws_lb_listener	Listener ports and protocols, and load balancer to target group flow
aws_autoscaling_attachment	Auto Scaling group to target group connections
aws_launch_template, aws_launch_configuration	Instance type, image and security groups of Auto Scaling instances
aws_security_group_rule, aws_vpc_security_group_ingress_rule, aws_vpc_security_group_egress_rule	Security group rules, and the traffic they permit between resources
aws_network_acl_rule, aws_network_acl_association	Network ACL rules and the subnets they apply to
aws_wafv2_web_acl_association	Which resource a web ACL protects
aws_iam_role_policy	Access from workloads to the data stores their policies grant
aws_lambda_event_source_mapping	Event triggers, such as a queue or stream invoking a function
aws_efs_mount_target	File system placement in subnets

Registry modules

Resources created inside modules, including popular registry modules such as terraform-aws-modules/vpc, /eks and /rds, are drawn the same as your own. Connections made through module inputs, outputs and locals are followed across module boundaries.

Missing a resource type?

Coverage grows with every renderer release. Tell us which types matter to you through Support in the dashboard. Requests from real configurations are what we add first.