See it on a fictional account

Everything below comes from “Acme Shop”, a fictional AWS account (123456789012, example.com) that contains no real infrastructure. The scanners and the codify pipeline are the real ones (RepliMap 0.6.0); nothing in the outputs is mocked. The scan found 122 resources, which became a graph of 106 nodes and 128 edges. 94 imports across 40 resource types were generated, and the Terraform passes terraform validate (1.14.5). 10 resources (7 types) are graph-only and not generated, 3 were skipped because CloudFormation owns them, and 15 were skipped because they are AWS defaults or service-owned.

The dependency graph

Interactive: drag, zoom and click nodes. It is a single self-contained HTML file with no external requests. Open full screen.

The generated Terraform

25 files, written to disk by replimap codify. Pick a file, or use the arrow keys in the list. Download all (.zip).

Where the graph becomes code: real cross-resource references in these files

The HTTPS listener references its ACM certificate, certificate_arn = aws_acm_certificate.origin_acmeshop_example_com.arn
A Route53 alias record references the load balancer, zone_id = aws_lb.acme_shop_web.zone_id
The CloudFront origin points at the same load balancer, domain_name = aws_lb.acme_shop_web.dns_name

Those lines are highlighted in the viewer. Then see : one import block per resource, so Terraform adopts what already exists instead of recreating it.

alb.tf

Raw file

1# Generated by RepliMap Codify2 3resource "aws_lb" "acme_shop_web" {4  drop_invalid_header_fields = false5  enable_deletion_protection = true6  idle_timeout               = "60"7  load_balancer_type         = "application"8  name                       = "acme-shop-web"9  security_groups            = [aws_security_group.acme-shop-alb.id]10  subnets                    = ["subnet-3bb0afd570fce1aef", "subnet-33c61b056a67b03e2"]11  tags = {12    CostCenter  = "cc-1042"13    Environment = "prod"14    Name        = "acme-shop-web"15    Owner       = "platform-team"16    Project     = "acme-shop"17  }18}19 20resource "aws_lb_listener" "acme_shop_web_http_80" {21  default_action {22    order = 123    redirect {24      port        = "443"25      protocol    = "HTTPS"26      status_code = "HTTP_301"27    }28    type = "redirect"29  }30  load_balancer_arn = aws_lb.acme_shop_web.arn31  port              = 8032  protocol          = "HTTP"33  tags = {34    CostCenter  = "cc-1042"35    Environment = "prod"36    Name        = "5c1e9a7b3d2f4e60"37    Owner       = "platform-team"38    Project     = "acme-shop"39  }40}41 42resource "aws_lb_listener" "acme_shop_web_https_443" {43  certificate_arn = aws_acm_certificate.origin_acmeshop_example_com.arn44  default_action {45    order            = 146    target_group_arn = aws_lb_target_group.acme-shop-web-ecs.arn47    type             = "forward"48  }49  load_balancer_arn = aws_lb.acme_shop_web.arn50  port              = 44351  protocol          = "HTTPS"52  tags = {53    CostCenter  = "cc-1042"54    Environment = "prod"55    Name        = "5c1e9a7b3d2f4e60"56    Owner       = "platform-team"57    Project     = "acme-shop"58  }59}60 61resource "aws_lb_target_group" "acme-shop-web-ec2" {62  deregistration_delay = "30"63  health_check {64    enabled             = true65    healthy_threshold   = 366    interval            = 3067    matcher             = "200"68    path                = "/healthz"69    port                = "traffic-port"70    protocol            = "HTTP"71    timeout             = 572    unhealthy_threshold = 373  }74  load_balancing_algorithm_type = "round_robin"75  name                          = "acme-shop-web-ec2"76  port                          = 808077  protocol                      = "HTTP"78  tags = {79    CostCenter  = "cc-1042"80    Environment = "prod"81    Name        = "acme-shop-web-ec2"82    Owner       = "platform-team"83    Project     = "acme-shop"84  }85  target_type = "instance"86  vpc_id      = aws_vpc.acme-shop-prod.id87}88 89resource "aws_lb_target_group" "acme-shop-web-ecs" {90  deregistration_delay = "30"91  health_check {92    enabled             = true93    healthy_threshold   = 394    interval            = 3095    matcher             = "200"96    path                = "/healthz"97    port                = "traffic-port"98    protocol            = "HTTP"99    timeout             = 5100    unhealthy_threshold = 3101  }102  load_balancing_algorithm_type = "round_robin"103  name                          = "acme-shop-web-ecs"104  port                          = 8080105  protocol                      = "HTTP"106  tags = {107    CostCenter  = "cc-1042"108    Environment = "prod"109    Name        = "acme-shop-web-ecs"110    Owner       = "platform-team"111    Project     = "acme-shop"112  }113  target_type = "ip"114  vpc_id      = aws_vpc.acme-shop-prod.id115}

What you don't see

Lambda functions, ECS services and task definitions, API Gateway resources and SSM parameters appear in the graph but are not generated as Terraform.
EC2 user_data is never stored, and secret values are never read.
Resources owned by CloudFormation and AWS-default resources are skipped on purpose.

More on what RepliMap reads and sends on the What RepliMap talks to page.

40 seconds in the terminal

The terminal output replays the synthetic account's numbers. The terraform plan line is illustrative.

Looping 40-second terminal recording: replimap scan reads the Acme Shop account (122 resources), replimap graph builds the dependency graph, replimap codify writes 94 import-ready Terraform resources, and a plan shows them being adopted with no changes.

Run it on your own account

Read-only, local, and nothing is uploaded.

pip install replimap

Then follow the quick start or read the docs.