Welcome to RepliMap

RepliMap is an AWS Infrastructure Intelligence Engine that reverse-engineers your AWS infrastructure into Terraform code. Visualize dependencies and audit security in minutes.

The Problem

You inherited an AWS account. Or maybe you built it yourself over 3 years of "just one more click."

Now you have:

• Hundreds of resources and no idea what connects to what
• No Terraform — or a state file that covers half of what's really there
• A hand-off (or an audit) coming — and no way to prove what exists

The Solution

RepliMap scans your AWS, builds a dependency graph, and gives you superpowers:

$ replimap -p prod scan

✓ Found 1,584 resources
✓ Mapped 1,470 dependencies
✓ Graph cached — next: replimap graph / codify

(That's real output from a 1,584-resource production account — the same account where we found the entire data layer, all 27 RDS instances, in no Terraform state at all.)

Key Features

Core Principles

Supported Resources

Resources are listed here only if RepliMap scans them from the AWS API. Types marked graph only appear in the dependency graph, graph and deps, but codify does not emit them as Terraform (it would need data RepliMap refuses to read, such as function code or secret values, or the type is not generated yet). Everything else is generated as Terraform (scan → codify).

codify also skips resources owned by a CloudFormation stack (tagged aws:cloudformation:stack-id / stack-name): importing them would make Terraform and CloudFormation fight over the same resource. The summary shows how many were skipped; pass --include-cfn-managed to generate them anyway. They stay in the scan graph, and --coverage-state reports them as auto-created rather than actionable. AWS-reserved aws: tags are never written to the generated Terraform.

39 codified resource types plus 12 graph-only types:

Not yet supported: EKS, EFS, CloudTrail, VPC Flow Logs.

New types are added based on what real scans encounter — if your account leans on something we don't cover yet, tell us.

Next Steps