Infrastructure map and attack paths

Explore your AWS environment as a graph and see how an attacker could chain weaknesses.

The Infrastructure page draws your AWS environment as an interactive graph. It shows accounts, instances, security groups, IAM roles, users and policies, and the IP ranges that can reach them.

Attack paths

Individual findings tell you what is wrong. Attack paths show how weaknesses combine. For example:

an EC2 instance reachable from the internet → whose instance role → can escalate to account administrator.

Attack paths are highlighted in red. Select a node or an edge to see its details. Fixing any link breaks the whole path, so attack paths help you pick the fix with the biggest effect.

Getting a map

The map is built from your AWS Security Review. Until you have run one, the page shows a labelled sample environment preview. Nothing in the preview is your data.

The map reflects the most recent review. Run another review, or rely on your plan's included reviews, to refresh it.