Architect's Desk for AWS · Copper Puffin Software

Start from a template

Each template is a realistic starting point, and templates built for Zero Trust open with the Zero Trust review in focus. Try the legacy “before” network and press Apply all to watch the Zero Trust score climb. Its cost and review update as soon as you change anything. Loading one replaces the current canvas (you can undo).

How Architect's Desk for AWS works

Lay it out. Drag services from the left onto the canvas. Drop them inside a VPC, AZ or subnet and they pick up that placement automatically.
Connect. Drag from the small dot on a service's right edge to another service.
Tune. Select a service to set its size and usage. The monthly estimate updates instantly.
Score it two ways. Every design is scored against both frameworks at once, and both scores are always shown on the canvas. Well-Architected scores the six AWS Well-Architected pillars, weighted by severity. Zero Trust rates the eight CISA Zero Trust Maturity Model v2 pillars from Traditional to Optimal and names the NIST SP 800-207 tenet behind each finding. Open the W-A or Zero Trust tab for the full review (press M to switch between them); the overview and exported report follow the review you opened last. most findings have a one-click fix, and Show highlights the services involved.
Accounts. Draw account boxes (workload, security, log archive, management) around services to show where they live. Logs belong in their own account.

Shortcuts

Ctrl Z / Ctrl Shift Z: Undo / redo
Del: Delete selection
Ctrl D: Duplicate
Ctrl A: Select all
← ↑ → ↓: Nudge (Shift for bigger steps)
Drag empty space: Pan (Shift-drag to box-select)
Scroll / + −: Zoom; F fits, 0 resets
G: Snap to grid on/off
Ctrl S / Ctrl O: Save / open JSON
M: Switch between the Well-Architected and Zero Trust reviews
Ctrl E: Export PNG
[: Collapse or expand the components panel for a larger canvas
T / ? / Esc: Templates / this help / close or deselect

About the numbers

Disclaimer. Both reviews look at a diagram, not a deployed system. The Well-Architected review is a fast first pass, not a formal AWS Well-Architected Framework Review. The Zero Trust review is aligned with CISA ZTMM v2.0 and NIST SP 800-207 and does not make anything compliant, certified or authorized under any framework.

Icons are original Copper Puffin Software drawings inspired by AWS services; AWS and the service names are trademarks of Amazon.com, Inc. or its affiliates. This tool is not affiliated with AWS.

Compare regions

This design's estimated monthly cost in every region, cheapest first.

On-demand list prices from each region's AWS Price List offer files. Click a region to switch the estimate to it.

Start with a template or drag a service in