Cloud Architecture Diagram Tool
Draw AWS and Azure estates with the official icons, or let Continuum Cloud draw them from a read-only scan, with each resource's detail behind its shape.
Free forever on the Personal plan
Cloud architecture diagrams: an example
AWS and Azure icons
The official AWS and Azure icon sets are built in, with containers for accounts, VPCs, VNets and subnets.
Drawn from a scan
On the Team plan, Continuum Cloud reads AWS and Azure with read-only access and draws what it finds.
Detail behind each resource
Address ranges, routing, owners and failure notes open from the resource itself.
The basics
What is a cloud architecture diagram?
A cloud architecture diagram shows how an application or an estate is built in the cloud: accounts and subscriptions, regions, networks such as VPCs and VNets, the services running in them, and how traffic moves between them and back to your own sites.
Architects use them for design reviews, security assessments, cost conversations and onboarding. They go stale quickly, because a cloud estate changes every week and a drawing does not change with it.
In Blueprintr you can draw the diagram by hand with the official icons or, on the Team plan, let Continuum Cloud draw it from a read-only scan of AWS or Azure and re-sync it when you choose.
Why Blueprintr
Cloud diagrams that keep up with the estate
Draw by hand, draw from a scan, or both on one canvas.
Official AWS and Azure icons
More than 1,500 AWS and Azure icons are built into Vellum, with Microsoft 365 and Kubernetes icons and containers for accounts, VPCs, VNets and subnets.
VellumDrawn from a read-only scan
On the Team plan, Continuum Cloud reads AWS accounts and Azure subscriptions with read-only access and draws the networks and resources, with a stratum for each resource.
ContinuumRe-sync without losing the layout
Sync when you choose. Your layout, labels and notes stay where you put them, and new resources wait on the Notes layer until you add them.
Views for routing, security and cost
Switch a scanned canvas between routing, security groups, IP addresses, public exposure, availability zones and estimated cost.
The context a scan cannot see
Write why a subnet exists, who owns a workload and what happens when it fails, in a stratum behind the resource.
StratumDraft it with AI
Describe an architecture and AI Draw lays it out with the installed AWS and Azure icons, ready to edit. The free plan includes five generations a month.
AI Features
How to
How to make a cloud architecture diagram in Blueprintr
Create a blueprint
Sign up free and create a blueprint for the estate or application you want to document.
Draw it or scan it
Draw with the AWS and Azure icons, or on the Team plan connect an account or subscription with read-only access.
Group by network
Put each resource inside its account, VPC or VNet and subnet containers, with the address range on each.
Add the context
Add strata for ownership, routing decisions and failure behaviour that no scan can see.
Publish and keep it current
Publish the blueprint, then re-sync or edit it whenever the estate changes.
Start from a template
AWS three-tier web application
CloudFront and WAF at the edge, a load balancer and an Auto Scaling tier across two zones, RDS and ElastiCache, with strata for every tier.
FAQ
Questions about cloud architecture diagrams
Is this cloud architecture diagram tool free?
Drawing is free. The Vellum editor with the AWS and Azure icon sets and strata is on the free Personal plan. Drawing an estate from a scan with Continuum Cloud is part of the Team plan.
Which clouds can Blueprintr scan?
Continuum Cloud scans AWS accounts and Azure subscriptions, read-only. Google Cloud is not scanned, and Vellum has no Google Cloud icon pack, though you can add your own SVG icons.
Does Continuum Cloud change anything in my account?
No. It uses a read-only role with an external ID in AWS, or a Reader assignment in Azure, and reads only the accounts, regions and networks you put in scope.
How does the diagram stay up to date?
You re-sync it when you choose; there is no scheduled sync. A sync keeps your layout and notes, and new resources wait on the Notes layer until you promote them.
Can it show Terraform drift?
For AWS, yes. Point the connection at your Terraform state in S3 or Terraform Cloud and resources that differ are outlined in amber. Azure connections do not show drift.
Can I use the diagram in a design review?
Yes. Export it as PNG, SVG, PDF, JPG or WebP, or publish the blueprint and share a link that opens the live diagram with every resource's detail.