aws-samples/well-architected-iac-analyzer

Sample Generative AI tool for evaluating Infrastructure as Code and architecture diagrams against AWS Well-Architected best practices.

What it solves

The Well-Architected IaC Analyzer helps developers and cloud architects evaluate their infrastructure-as-code (IaC) templates against AWS Well-Architected best practices. It identifies potential risks, security gaps, and performance issues before deployment, providing actionable recommendations to improve cloud architecture.

How it works

This project provides a web-based interface where users upload IaC files (Terraform, CloudFormation, or CDK) or architecture diagrams. It uses Amazon Bedrock and Anthropic's Claude models to analyze these files against a knowledge base of AWS best practices. The system includes an interactive chatbot for follow-up questions, a prioritization matrix to help users rank remediation tasks by effort and impact, and support for custom organizational lenses to enforce internal standards.

Who it’s for

Cloud engineers, DevOps practitioners, and architects who want to automate the review of their infrastructure code to ensure it aligns with AWS standards for security, cost, and performance.

Highlights

  • Automated Analysis: Evaluates IaC templates and architecture diagrams against official AWS Well-Architected frameworks.
  • Prioritization Framework: Uses an Eisenhower-style matrix to score and categorize remediation tasks based on criticality and complexity.
  • Interactive Assistant: Features an AI-powered chatbot to explain findings and provide guidance on implementing best practices.
  • Flexible Deployment: Supports multiple deployment methods, including a one-click CloudFormation stack, and offers multi-language support for global teams.

Related

  • Project
  • Project
  • Project
  • Project
  • Project