AutoGineer
Generated banner for AWS Architecture Diagram
Generated logo for AWS Architecture Diagram

AWS Architecture Diagram

AWS LabsOfficialPublished by AWS Labs

  • Skill
  • Content generator
  • Software development
  • Apache-2.0
  • Low risk
Download ZIP

From the author

Generate validated AWS architecture diagrams as draw.io XML using official AWS4 icon libraries. Use this skill whenever the user wants to create, generate, or design AWS architecture diagrams, cloud infrastructure diagrams, or system design visuals. Also triggers for requests to visualize existing infrastructure from CloudFormation, CDK, or Terraform code. Supports two modes: analyze an existing codebase to auto-generate diagrams, or brainstorm interactively from scratch. Exports .drawio files with optional PNG/SVG/PDF export via draw.io desktop CLI.
— the description by AWS Labs

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

This skill generates standardized AWS architecture diagrams in draw.io XML format, adhering to official AWS4 icon libraries and design patterns. It supports two primary workflows: analyzing existing infrastructure code (CloudFormation, CDK, Terraform) to auto-generate visual representations, or interactively brainstorming new system designs from scratch. The output is a structured, professional diagram featuring consistent typography, color-coded category containers, and clear data flow paths, with optional support for sketch-style visuals and automated export to various image formats.

What it does

  • Scans infrastructure code to visualize existing AWS environments.
  • Brainstorms and designs new cloud architectures based on user requirements.
  • Produces professional draw.io XML files with official AWS4 service icons.
  • Applies standardized styling, including category tints, font hierarchies, and legend panels.
  • Validates XML structure and geometry to ensure compatibility with draw.io.
  • Provides a direct preview link for generated diagrams via the draw.io web interface.

When to use it

  • When you need to document an existing AWS infrastructure setup.
  • When designing a new cloud system and requiring a visual reference.
  • When you need to present system architecture to stakeholders.
  • When you want to visualize complex data flows or multi-region deployments.

Advantages

  • Ensures professional, consistent visual standards across all diagrams.
  • Automates the tedious process of manual diagram creation.
  • Reduces errors through automated XML validation and badge fixing.
  • Supports both code-driven and conceptual design workflows.
  • Integrates seamlessly with existing CI/CD or documentation pipelines.

Usage examples

“Analyze my Terraform files in the current directory and generate an architecture diagram.”
The agent scans the Terraform configuration, identifies AWS resources, and produces a structured draw.io XML file visualizing the infrastructure.
“Design a serverless API architecture using API Gateway, Lambda, and DynamoDB.”
The agent proposes a layout, asks clarifying questions if needed, and generates a professional diagram with the requested services.

Install

  1. Download the skill as a ZIP:

    https://mp-staging.autogineer.com/agent-skills/awslabs/aws-architecture-diagram/download

  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip aws-architecture-diagram.zip -d .agents/skills

Documentation by AWS Labs

You are an AWS architecture diagram generator that produces draw.io XML files with official AWS4 icons. The diagrams you produce MUST match the style of official AWS Reference Architecture diagrams — professional title and subtitle, teal numbered step badges with a right sidebar legend, 48x48 service icons inside colored category containers, clean Helvetica typography, and clear data flow.

Workflow

Step 1: Determine Mode

Mode A — Codebase Analysis: If the user says "analyze", "scan", "from code", or references their existing project:

  1. Scan for infrastructure files: CloudFormation (AWSTemplateFormatVersion, AWS::*), CDK (cdk.json, construct definitions), Terraform (resource "aws_*")

  2. Extract services, relationships, VPC structure, and data flow direction

  3. If NO AWS infrastructure files found, scan for non-AWS technologies: Dockerfiles, database configs, API integrations, ML frameworks (pytorch, tensorflow, coreml), message brokers (kafka, rabbitmq). Map discovered technologies using references/general-icons.md

  4. For MIXED architectures (AWS + non-AWS): use AWS icons for AWS services, general icons for non-AWS. Same layout rules apply.

  5. Confirm discovered architecture with user before generating

  6. Ask which diagram type best represents the architecture

Mode B — Brainstorming: If the user describes an architecture or says "brainstorm"/"design"/"from scratch":

  1. Ask 3-5 focused questions (purpose, services, scale, security, traffic pattern)

  2. Propose the architecture with service recommendations and data flow

  3. Iterate if needed, then generate

Step 2: Styling Selections

These are independent of Mode and apply after mode selection:

  • Sketch mode: Activated ONLY if user says "sketch", "hand-drawn", or "sketchy". Default: OFF (Helvetica, no sketch attributes). See Sketch Mode in Style Rules below.

  • Legend panel: Activated by default for 7+ services or multiple branching paths. Disabled ONLY if user says "no legend", "without legend", "skip steps", or "no sidebar".

  • Export format: Check for format keywords (png, svg, pdf). Default: .drawio only.

Step 3: Generate Diagram XML

Load references now (not before this step):

  1. Read references/xml-rules.md for shape styles, label placement, and structural rules

  2. Read references/style-guide.md for colors, fonts, and dark mode

  3. Read references/xml-templates-structure.md for XML code blocks

  4. Read references/layout-guidelines.md for spacing and edge routing

  5. Use the example entries in the table below only as conceptual guidance for edge routing and layout patterns; do not open or read any .drawio files as reference.

Example selection — pick the most relevant example for the user's architecture:

Diagram TypePrimary ExampleSecondary
Serverless / APIexample-saas-backend.drawioexample-event-driven.drawio
Event-driven / asyncexample-event-driven.drawioexample-microservices.drawio
Microservices / ECSexample-microservices.drawioexample-complex-platform.drawio
Multi-regionexample-multi-region-active-active.drawio—
Complex (13+ services)example-complex-platform.drawioexample-saas-backend.drawio
AI / AgentCoreexample-agentcore.drawioexample-event-driven.drawio
Sketch modeexample-sketch.drawio+ one from above

  1. If the architecture includes non-AWS services, also read references/general-icons.md

  2. Generate the XML following all loaded rules and the selected example's patterns

  3. Apply styling selections from Step 2

Step 4: Validate and Export

  1. Write the .drawio file to ./docs/

  2. PostToolUse hook validates XML automatically (see references/post-processing.md for the fixer pipeline)

  3. If validation fails, fix errors and rewrite

  4. Run badge overlap fixer: python3 ${PLUGIN_ROOT}/scripts/lib/fix_step_badges.py ./docs/<filename>.drawio

  5. After validation passes, generate preview URL:

    python3 ${PLUGIN_ROOT}/scripts/lib/drawio_url.py ./docs/<filename>.drawio --open

  6. If export format requested, run draw.io CLI (see references/cli-export.md)

Defaults

  • Mode: Brainstorm (if no codebase context)

  • Font: fontFamily=Helvetica (Comic Sans MS only in sketch mode)

  • Icon size: 48x48 inside 120x120 containers

  • Spacing: 180px horizontal, 120px vertical between service group containers

  • Legend: ALWAYS for 7+ services (unless user opts out)

  • Sketch mode: OFF (unless user explicitly requests)

  • Dark mode: light-dark() on all structural elements (always enabled)

  • Export format: .drawio (unless user requests png/svg/pdf)

  • Grid: OFF (grid=0)

  • File location: ./docs/ directory

  • XML format: Uncompressed, wrapped in <mxfile><diagram><mxGraphModel>

Error Handling

  • XML validation failure: Fix reported errors (malformed tags, missing IDs, invalid shapes), rewrite the file, re-validate

  • Shape not found: Check references/aws4-shapes-services.md for valid mxgraph.aws4.* names

  • draw.io CLI not found: Write .drawio file only, skip export, inform user to install draw.io desktop

  • Invalid edge source/target: Verify all source= and target= IDs reference existing mxCell elements

  • Double hyphens in XML comments: -- is illegal inside <!-- --> per XML spec; use single hyphens or rephrase

  • Special characters: Escape &, <, >, " in attribute values

Style Rules

Full style details in references/style-guide.md. Critical rules that MUST be followed:

  • Font: ALL text MUST use fontFamily=Helvetica; (Comic Sans MS only in sketch mode)

  • Dark mode: ALL structural elements MUST use light-dark() fills with fillStyle=auto;. See style-guide.md for the full color table.

  • Region groups: MUST use container=0 (decoration-only). Services use parent="aws-cloud" with absolute coords.

  • Group fontColor: MUST match the group's strokeColor (VPC: #8C4FFF, Public subnet: #248814, Private subnet: #147EBA, Region: #00A4A6). NEVER use fontColor=#AAB7B8.

  • Font hierarchy: Title 30px bold > Subtitle 16px > Group 14px bold > Container 12px bold > Service 10px > Edge 11px

  • Category containers: Every 48x48 icon MUST sit inside a 120x120 container with its category tint color. See style-guide.md for the tint color table.

  • AgentCore: Use resIcon=mxgraph.aws4.bedrock_agentcore (NOT mxgraph.aws4.bedrock)

  • Sketch mode: Only when user requests it. Add sketch=1;curveFitting=1;jiggle=2 to non-icon elements. Keep sketch=0 on service icons.

  • Non-AWS services: Map to the closest general icon using references/general-icons.md. Same 120x120 container + 48x48 icon pattern. Apply category tint colors by functional role (database, compute, etc.). Labels are critical since icons are generic.

Diagram Types

  • VPC/Network: VPC, subnets, security groups, NAT gateways, load balancers with group shapes

  • Serverless: API Gateway, Lambda, DynamoDB, S3, Step Functions, EventBridge

  • Multi-Region: Multiple regions with replication, Route 53, Global Accelerator

  • CI/CD Pipeline: CodeCommit/GitHub -> CodeBuild -> CodeDeploy -> targets

  • Data Flow/Analytics: Kinesis, S3, Glue, Athena, Redshift, QuickSight pipelines

  • Container: ECS/EKS clusters, ECR, Fargate, load balancing

  • Hybrid: On-premises + AWS with Direct Connect, VPN, Transit Gateway

See references/diagram-templates-basic.md and references/diagram-templates-advanced.md for layout patterns.

XML Generation Rules

For detailed XML templates, style strings, and code examples, see references/xml-rules.md. Key structural rules:

Required Structure

Always use the full mxfile wrapper:

<mxfile host="Electron" version="29.6.1">
  <diagram name="Page-1" id="diagram-1">
    <mxGraphModel dx="1200" dy="800" grid="0" gridSize="10" guides="1" tooltips="1" connect="1" arrows="1" fold="1" page="0" pageScale="1" pageWidth="1100" pageHeight="850" math="0" shadow="0">
      <root>
        <mxCell id="0" />
        <mxCell id="1" parent="0" />
        <!-- All shapes and edges here -->
      </root>
    </mxGraphModel>
  </diagram>
</mxfile>

  • Cell id="0" is the root layer; cell id="1" is the default parent (both always required)

  • All diagram elements use parent="1" unless nested inside a container

  • Use descriptive cell IDs: vpc-1, lambda-orders, s3-assets, edge-lambda-to-dynamo

Key Principles

  • ALWAYS use mxgraph.aws4.* namespace. Use resourceIcon;resIcon= for main service icons, sub-resource style for components.

  • Container value = category label (e.g., "DNS", "Compute"). Icon value = service name + optional italic sub-label. NEVER put the service name on the container.

  • Edges connect to service icons, not containers. Use exitX/exitY and entryX/entryY (0-1) to control connection sides.

  • Edge labels are separate child cells with connectable="0" and relative="1" geometry.

  • Region groups use container=0 (decoration-only). VPC/subnets use container=1.

  • Prefer flat layouts. Only use nested containers for real infrastructure boundaries (VPC, subnets, AZs).

  • External actors use visible containers (fillColor=#f5f5f5), placed BELOW title block at y >= 140.

Layout Guidelines

For detailed spacing rules, edge routing patterns, and placement tables, see references/layout-guidelines.md. Key rules:

  • Spacing: 180px horizontal / 120px vertical gaps. For 13+ services, increase to 220px/160px.

  • Edge routing: Use orthogonalEdgeStyle. Add explicit waypoints for non-adjacent routing. Edges leave perpendicular to container face.

  • Multiple edges: Each outgoing edge MUST exit from a different point. Spread entry points when multiple edges enter the same target.

  • Step badges/legend: Teal #007CBD 28x28 badges near arrow sources. Right sidebar legend for 7+ services. Legend height MUST match diagram height.

  • Auxiliary services: Only CloudWatch, CloudTrail, X-Ray, IAM. No step numbers, no edges. Place in dashed "Auxiliary Services" group inside AWS Cloud boundary.

  • All other services are primary — MUST have edges and step numbers.

File Naming

Each diagram gets a descriptive filename in kebab-case, placed in ./docs/ (e.g., docs/healthcare-appointment-agent.drawio, docs/3-tier-vpc-webapp.drawio). Always create a new file unless the user explicitly asks to update an existing diagram.

Output

  1. Create the docs/ directory if it does not exist

  2. Derive the filename from the user's prompt (see File Naming above)

  3. Always create new files unless the user explicitly asks to update an existing diagram

  4. Save the diagram to ./docs/<descriptive-name>.drawio

  5. After writing, the PostToolUse hook will automatically: a. Validate the XML (structure, AWS shapes, edges, geometry) b. If validation passes, generate a draw.io preview URL

  6. If validation fails, fix the errors and rewrite the file

  7. Only after validation passes, generate the browser preview link by running:

    python3 ${PLUGIN_ROOT}/scripts/lib/drawio_url.py ./docs/<filename>.drawio --open

    This compresses the XML and opens app.diagrams.net with the diagram loaded instantly. Do NOT run this if validation failed.

  8. If the user requested an export format (png, svg, pdf): a. Check if draw.io desktop CLI is available b. Export with --embed-diagram to ./docs/<filename>.drawio.<format> c. Delete the intermediate .drawio file on success

  9. Always present to the user:

    • File path

    • Diagram type and services included

    • Validation status

    • The draw.io preview URL (clickable link to open in browser)

    • A recommended alt text (concise, under 100 characters, describing the diagram's purpose — not "diagram of...")

CRITICAL: XML Well-Formedness

  • NEVER use double hyphens (--) inside XML comments. -- is illegal inside <!-- --> per the XML spec and causes parse errors. Use single hyphens or rephrase.

  • Escape special characters in attribute values: &, <, >, "

  • Always use unique id values for each mxCell

Important Rules

  • NEVER use compressed/base64 diagram content

  • NEVER invent shape names — only use shapes from references/aws4-shapes-services.md

  • ALWAYS wrap XML in <mxfile><diagram><mxGraphModel> — not bare <mxGraphModel>

  • ALWAYS include cells id="0" and id="1" as root and default layer

  • ALWAYS use resourceIcon;resIcon= style for main service icons

  • ALWAYS set container=1;pointerEvents=0; on group shapes

  • ALWAYS validate edge source/target IDs reference existing cells

  • ALWAYS include a title block at the top of every diagram

  • ALWAYS place 48x48 service icons inside colored category containers

  • ALWAYS use fontFamily=Helvetica; in every style attribute

  • For complex diagrams (7+ services), ALWAYS add step badges and legend

  • Use descriptive cell IDs, not random strings (e.g., vpc-1, lambda-orders, not cell-47)

  • Add italic sub-labels to service icons to clarify their role in the architecture

  • Only include services the user explicitly mentions or that are core to the data flow. Do NOT add cross-cutting concerns (IAM, CloudWatch, CloudTrail, KMS, S3 for logs, etc.) unless the user asks for them

  • Include a title/label on the diagram describing the architecture

  • NEVER set a background attribute on mxGraphModel — any hardcoded background breaks dark mode adaptive contrast

Reference Priority

When generating diagrams, follow this priority order:

  1. This skill's XML generation rules and style guide (ALWAYS authoritative)

  2. This skill's example .drawio files in references/ (Step 3 selection table)

  3. The user's existing .drawio files ONLY when explicitly requested ("match my style", "update my diagram")

Do NOT proactively read .drawio files from the user's project unless they specifically ask you to reference or modify them. The skill's own examples and rules always take precedence for style and structure.

Files

references/aws4-shapes-resources.md

AWS4 Sub-Resource and Misc Shapes

These are service sub-components and utility shapes, not main service icons. Use shape=mxgraph.aws4.{name} style (not resourceIcon) at 48x48.

Sub-Resource Icons

Alexa: alexa_enabled_device, alexa_skill, alexa_smart_home_skill, alexa_voice_service

Application: application_discovery_service_aws_agentless_collector, application_discovery_service_aws_discovery_agent, application_discovery_service_migration_evaluator_collector, application_load_balancer

Aws: aws_backup_for_aws_cloudformation, aws_backup_legal_hold, aws_backup_support_for_amazon_fsx_for_netapp_ontap, aws_backup_vault_lock, aws_backup_virtual_machine_monitor, aws_cloud, aws_glue_data_quality, aws_glue_for_ray, aws_user_notifications

Backup: backup_audit_manager, backup_aws_backup_support_for_amazon_s3, backup_aws_backup_support_for_vmware_workloads, backup_backup_plan, backup_backup_restore, backup_compliance_reporting, backup_compute, backup_database, backup_gateway, backup_plan, backup_recovery_point_objective, backup_recovery_time_objective, backup_restore, backup_storage, backup_vault, backup_virtual_machine, backup_virtual_machine_monitor

Braket: braket_chandelier, braket_chip, braket_embedded_simulator, braket_managed_simulator, braket_noise_simulator, braket_qpu, braket_simulator, braket_simulator_1, braket_simulator_2, braket_simulator_3, braket_simulator_4, braket_state_vector, braket_tensor_network

Checklist: checklist_cost, checklist_fault_tolerant, checklist_performance, checklist_security

Cloud: cloud_digital_interface, cloud_extension_ros, cloud_map_resource, cloud_wan_segment_network, cloud_wan_transit_gateway_route_table_attachment, cloud_wan_virtual_pop

Cloudwatch: cloudwatch_cross_account_observability, cloudwatch_data_protection, cloudwatch_evidently, cloudwatch_logs, cloudwatch_metrics_insights, cloudwatch_rum, cloudwatch_synthetics

Container: container_1, container_2, container_3, container_registry_image

Data: data_encryption_key, data_exchange_for_apis, data_lake_resource_icon, data_set, data_stream, data_table

Datazone: datazone_business_data_catalog, datazone_data_portal, datazone_data_projects

Db: db_instance, db_instance_read_replica, db_instance_standby, db_on_instance, db_on_instance2

Dynamodb: dynamodb_dax, dynamodb_standard_access_table_class, dynamodb_standard_infrequent_access_table_class, dynamodb_stream

Ec2: ec2_aws_microservice_extractor_for_net, ec2_c6a_instance, ec2_c6gn_instance, ec2_c6i_instance, ec2_c6in_instance, ec2_c7g_instance, ec2_c7gn_instance, ec2_dl1_instance, ec2_g5_instance, ec2_g5g_instance, ec2_hpc6a_instance, ec2_hpc6id_instance, ec2_i4i_instance, ec2_im4gn_instance, ec2_inf2_instance, ec2_instance_contents, ec2_is4gen_instance, ec2_m1_mac_instance, ec2_m6a_instance, ec2_m6i_instance, ec2_m6idn_instance, ec2_m6in_instance, ec2_p4de_instance, ec2_r6a_instance, ec2_r6i_instance, ec2_r6idn_instance, ec2_r6in_instance, ec2_r7iz_instance, ec2_trn1_instance, ec2_vt1_instance, ec2_x2gd_instance, ec2_x2idn_instance, ec2_x2iedn_instance, ec2_x2iezn_instance

Ecs: ecs_copilot_cli, ecs_service, ecs_service_connect, ecs_task

Elastic: elastic_block_store_amazon_data_lifecycle_manager, elastic_block_store_volume_gp3, elastic_file_system_elastic_throughput, elastic_file_system_infrequent_access, elastic_file_system_intelligent_tiering, elastic_file_system_one_zone, elastic_file_system_one_zone_infrequent_access, elastic_file_system_one_zone_standard, elastic_file_system_standard, elastic_file_system_standard_infrequent_access, elastic_inference, elastic_ip_address, elastic_network_adapter, elastic_network_interface

Elasticache: elasticache_for_memcached, elasticache_for_redis, elasticache_for_valkey

Emr: emr_engine, emr_engine_mapr_m3, emr_engine_mapr_m5, emr_engine_mapr_m7

Event: event_event_based, event_resource, event_time_based

Eventbridge: eventbridge_custom_event_bus_resource, eventbridge_default_event_bus_resource, eventbridge_pipes, eventbridge_saas_partner_event_bus_resource, eventbridge_scheduler, eventbridge_schema, eventbridge_schema_registry

File: file_cache_hybrid_nfs_linked_datasets, file_cache_on_premises_nfs_linked_datasets, file_cache_s3_linked_datasets, file_gateway, file_system

Generic: generic_application, generic_database, generic_firewall

Group: group_availability_zone, group_elastic_load_balancing, group_subnet, group_vpc

Illustration: illustration_desktop, illustration_devices, illustration_notification, illustration_office_building, illustration_users

Internet: internet_alt1, internet_alt2, internet_alt22, internet_gateway

Iot: iot_analytics_channel, iot_analytics_data_store, iot_analytics_dataset, iot_analytics_pipeline, iot_core_device_advisor, iot_core_device_location, iot_device_defender_iot_device_jobs, iot_device_gateway, iot_device_jobs_resource, iot_device_management_fleet, iot_device_tester, iot_greengrass_artifact, iot_greengrass_component, iot_greengrass_component_machine_learning, iot_greengrass_component_nucleus, iot_greengrass_component_private, iot_greengrass_component_public, iot_greengrass_interprocess_communication, iot_greengrass_protocol, iot_greengrass_recipe, iot_greengrass_stream_manager, iot_lorawan_protocol, iot_over_the_air_update, iot_sailboat, iot_sitewise_asset, iot_sitewise_asset_hierarchy, iot_sitewise_asset_model, iot_sitewise_asset_properties, iot_sitewise_data_streams, iot_thing_freertos_device, iot_thing_humidity_sensor, iot_thing_industrial_pc, iot_thing_plc, iot_thing_relay, iot_thing_stacklight, iot_thing_temperature_humidity_sensor, iot_thing_temperature_sensor, iot_thing_temperature_vibration_sensor, iot_thing_vibration_sensor

Location: location_service_geofence, location_service_map, location_service_place, location_service_routes, location_service_track

Mainframe: mainframe_modernization_analyzer, mainframe_modernization_compiler, mainframe_modernization_converter, mainframe_modernization_developer, mainframe_modernization_runtime

Migration: migration_hub_refactor_spaces_applications, migration_hub_refactor_spaces_environments, migration_hub_refactor_spaces_services

Network: network_access_control_list, network_firewall_endpoints, network_load_balancer

Opensearch: opensearch_dashboards, opensearch_ingestion, opensearch_observability, opensearch_service_cluster_administrator_node, opensearch_service_data_node, opensearch_service_index, opensearch_service_traces, opensearch_service_ultrawarm_node

Organizations: organizations_account, organizations_account2, organizations_management_account, organizations_management_account2, organizations_organizational_unit, organizations_organizational_unit2

Rds: rds_blue_green_deployments, rds_instance, rds_instance_alt, rds_mariadb_instance, rds_mariadb_instance_alt, rds_multi_az, rds_multi_az_db_cluster, rds_mysql_instance, rds_mysql_instance_alt, rds_optimized_writes, rds_oracle_instance, rds_oracle_instance_alt, rds_piop, rds_piops, rds_postgresql_instance, rds_postgresql_instance_alt, rds_proxy, rds_proxy_alt, rds_sql_server_instance, rds_sql_server_instance_alt, rds_trusted_language_extensions_for_postgresql

Redshift: redshift_auto_copy, redshift_data_sharing_governance, redshift_ml, redshift_query_editor_v20_light, redshift_ra3, redshift_streaming_ingestion

Route: route_53_application_recovery_controller, route_53_readiness_checks, route_53_resolver, route_53_resolver_dns_firewall, route_53_resolver_query_logging, route_53_routing_controls, route_table

S3: s3_batch_operations, s3_express_one_zone, s3_file_gateway, s3_multi_region_access_points, s3_object_lambda, s3_object_lambda_access_points, s3_object_lock, s3_on_outposts, s3_replication_time_control, s3_select, s3_storage_lens, s3_tables, s3_vectors

Sagemaker: sagemaker_canvas, sagemaker_geospatial_ml, sagemaker_model, sagemaker_notebook, sagemaker_shadow_testing, sagemaker_train

Simple: simple_ad, simple_storage_service_directory_bucket, simple_storage_service_s3_glacier_instant_retrieval

Systems: systems_manager_application_manager, systems_manager_change_calendar, systems_manager_change_manager, systems_manager_compliance, systems_manager_distributor, systems_manager_opscenter, systems_manager_session_manager

Transfer: transfer_family_aws_as2, transfer_for_ftp_resource, transfer_for_ftps_resource, transfer_for_sftp_resource

Virtual: virtual_gateway, virtual_node, virtual_private_cloud, virtual_router, virtual_service, virtual_tape_library

Vpc: vpc_access_points, vpc_carrier_gateway, vpc_network_access_analyzer, vpc_reachability_analyzer, vpc_traffic_mirroring, vpc_virtual_private_cloud_vpc

Waf: waf_bad_bot, waf_bot, waf_bot_control, waf_labels, waf_managed_rule, waf_rule

Workspaces: workspaces_family_amazon_workspaces, workspaces_family_amazon_workspaces_core, workspaces_workspaces_web

Misc Shapes

action, actuator, addon, agent, agent2, alarm, alert, ami, application, apps, archive, attribute, attributes, automation, bank, bucket, budgets, bycicle, c5a, c5ad, c5d, c6gd, camera, camera2, car, cart, chat, checklist, client, cloudsearch, cloudwatch, cluster, connector, credentials, deployment, deployments, disk, document, documents, documents2, documents3, echo, email, endpoint, endpoints, event, factory, finding, firetv, folder, folders, forums, g4dn, gamelift, gateway, gear, generic, globe, house, i2, i3en, inf1, inferentia, instance, instance2, instances, internet, inventory, item, items, layers, lightbulb, logs, m5n, mesh, message, metrics, monitoring, multimedia, mxgraph.aws4, namespace, notebook, nova, object, peering, permissions, policy, privatelink, question, queue, r5n, recover, registry, rekognition, replication, rescue, resource, resources, role, router, rule, sensor, servers, service, servo, shadow, shield2, simulation, simulator, snapshot, stack, stack2, sts, table, template, thermostat, topic, travel, user, users, utility, vault, volume, windfarm

Other Sub-Resource Icons

a1_instance, access_analyzer, ad_connector, amplify_aws_amplify_studio, athena_data_source_connectors, aurora_instance, aurora_instance_alt, authenticated_user, auto_scaling, blockchain_resource, bucket_with_objects, c4_instance, c5_instance, c5n_instance, c6g_instance, cache_node, cached_volume, certificate_manager, certificate_manager_2, change_set, classic_load_balancer, cloudfront_functions, cloudtrail_cloudtrail_lake, coffee_pot, cold_storage, corporate_data_center, corporate_data_center2, custom_event_bus_resource, customer_gateway, d2_instance, d3_instance, d3en_instance, database_migration_workflow_job, datasync_discovery, default_event_bus_resource, dense_compute_node, dense_storage_node, desired_state, development_environment, devops_guru_insights, documentdb_elastic_clusters, door_lock, download_distribution, edge_location, eks_on_outposts, email_2, email_notification, encrypted_data, external_sdk, external_toolkit, f1_instance, filtering_rule, firetv_stick, fleet_management, flow_logs, fsx_file_gateway, g3_instance, g4ad_instance, game_tech, game_tech2, gateway_load_balancer, general_access_points, git_repository, glacier_deep_archive, global_secondary_index, glue_crawlers, glue_data_catalog, h1_instance, habana_gaudi, hardware_board, hdfs_cluster, high_memory_instance, hosted_zone, http2_protocol, http_notification, http_protocol, i3_instance, identity_access_management_iam_roles_anywhere, import_export, instance_with_cloudwatch, instance_with_cloudwatch2, instances_2, intelligent_tiering, json_script, key_management_service_external_key_store, lambda_function, license_manager_application_discovery, license_manager_license_blending, long_term_security_credential, m4_instance, m5_instance, m5a_instance, m5d_instance, m5dn_instance, m5n_instance, m5zn_instance, m6g_instance, m6gd_instance, mac_instance, magnifying_glass, magnifying_glass_2, maintenance_windows, managed_ms_ad, management_console2, mediaconnect_gateway, medical_emergency, mfa_token, mobile_client, mobile_hub, mq_broker, mqtt_protocol, ms_sql_instance, ms_sql_instance_alternate, msk_amazon_msk_connect, multiple_volumes_resource, mysql_db_instance, mysql_db_instance_alternate, nat_gateway, non_cached_volume, office_building, one_zone_ia, open_3d_engine, opsworks_apps, opsworks_permissions, optimized_instance, oracle_db_instance, oracle_db_instance_alternate, p2_instance, p3_instance, p3dn_instance, p4_instance, p4d_instance, parameter_store, patch_manager, permissions_2, pinpoint_journey, police_emergency, postgresql_instance, programming_language, quicksight_paginated_reports, r4_instance, r5_instance, r5a_instance, r5ad_instance, r5b_instance, r5d_instance, r5gd_instance, r5n_instance, r6g_instance, rdn_instance, rekognition_image, rekognition_video, replication_time_control, reported_state, rule_2, rule_3, run_command, saas_event_bus_resource, saml_token, search_documents, security_group, security_hub_finding, shield_shield_advanced, source_code, spot_instance, sql_primary, sql_replica, ssl_padlock, standard_ia, state_manager, streaming_distribution, sts_alternate, t2_instance, t3_instance, t3a_instance, t4g_instance, tape_gateway, tape_storage, temporary_security_credential, textract_analyze_lending, topic_2, traditional_server, trainium_instance, transit_gateway_attachment, volume_gateway, vpn_connection, vpn_gateway, well_architected_tool, work_package, x1_instance, x1_instance2, x1e_instance, z1d_instance

Requirements and compatibility

Written for: Claude Code

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Needs: Declares allowed tools, Claude Code frontmatter, Needs Python

Security

What our scanner noticed· Low risk

  • Instructions that use the network

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Published by
AWS Labs
Publisher
AWS Labs (Official)
Source
awslabs/agent-plugins · plugins/deploy-on-aws/skills/aws-architecture-diagram · commit fbefb37
Licence
Apache License 2.0 (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • NOTICE (added by AutoGineer from NOTICE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by AWS Labs.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download aws-architecture-diagram.zip