Everything you need to take over a brownfield AWS account
From the first scan to import-ready Terraform and audit evidence — the takeover workflow, end to end.
Terraform Generation
Turn an existing AWS account into clean, full-account Terraform resource files on every plan — plus an import scaffold (imports.tf) on Pro, so brownfield adoption validates on day one.
IaC Coverage
See exactly which resources live in no Terraform state at all — the ClickOps inventory that terraform plan structurally can't show you.
IAM Generation
Generate least-privilege IAM policies based on actual resource dependencies.
Dependency Mapping
Visualize resource relationships and blast radius in an interactive graph — one self-contained HTML file you can open air-gapped or hand to a client.
Resilient Scanning
Parallel scanners cover 1,500+ resource accounts in minutes, with per-item retries so a transient AWS error never silently drops a resource.
Security First
Runs 100% locally. Credentials and infrastructure data never leave your machine — even generated reports load nothing from the internet.
Built for the people who inherit AWS accounts
Most AWS environments weren't born in Terraform. RepliMap is for whoever has to clean that up — and prove it's done.
Brownfield Takeover
Walk into an unfamiliar AWS account and walk out with a full inventory, a dependency map, and import-ready Terraform.
Security Hardening
Auto-generate least-privilege IAM policies based on actual resource dependencies and usage patterns.
Audit Evidence
Run a SOC 2-mapped audit against live AWS and export the findings as an evidence package your auditor can actually use.
Simple, transparent pricing
Unlimited scanning. Pay only when you export.
Community
See everything. Free.
Scan a full account, map every dependency, and generate real Terraform — free.
Get Started Free- Unlimited scans, unlimited resources
- 1 AWS account
- Interactive dependency graph (self-contained HTML)
- Terraform resource files — full account
- IaC coverage summary (unmanaged counts)
- Audit score + terminal summary
- Requires internet connectionOnline only
- imports.tf import scaffold
- Audit HTML report / SOC 2 evidence export
- Full unmanaged-resource list + coverage.json
Pro
The contractor deliverable
The two things in a client hand-off: an import-ready scaffold and the audit evidence.
Start Pro- Everything in Community
- Unlimited AWS accounts (fair use)
- imports.tf — import scaffold for the whole account
- Audit HTML report + SOC 2 evidence export
- Full unmanaged-resource list + coverage.json
- Graph export without watermark
- 7 days offline grace period
- 48h email support SLA
- 2 activated devices
- CI mode with blocking checks (--fail-on)
Team
Organization delivery
For consultancies and platform teams that deliver as an organization.
Start Team- Everything in Pro
- 10 activated devices
- CI mode with blocking checks (--fail-on)
- Trust Center report (audit trail of the AWS API calls RepliMap made)
- 14 days offline grace period
- 24h priority support SLA
- Air-gapped activation by signed license file
Sovereign
Data sovereignty for regulated industries
When your regulator asks “Where does the data go?”, the answer is: Nowhere.
Unlimited scanning. Pay only when you export. Your data never leaves your machine.
Frequently Asked Questions
Ready to take control of your AWS infrastructure?
Start scanning in under 2 minutes. No credit card required.