CloudAtlas

Discover your entire AWS infrastructure in minutes

CloudAtlas scans every account in your AWS Organization and maps all resources across every region — EC2, RDS, Lambda, VPC, IAM, and 20+ more services. Self-hosted. Open source. Zero telemetry.

How it works

01

Configure IAM roles

Create a root role in the management account and deploy the inventory role to all child accounts — manually or with one click.

IAM Setup Guide
02

Deploy with Docker

Run docker compose up on any VPS. Traefik handles HTTPS automatically. No Kubernetes required.

Deployment Guide
03

Start scanning

Click Start Scan. CloudAtlas discovers every account, assumes the cross-account role, and scans all regions in parallel.

Open Dashboard

Features

Multi-Account Discovery

Scans every account in your AWS Organization automatically — no per-account configuration needed.

Parallel Scanning

Concurrent region and account scanning using thread pools. 1,000 resources across 20 accounts in under 2 minutes.

Least-Privilege IAM

ReadOnlyAccess only. CloudAtlas never modifies your infrastructure. Roles are auditable and removable.

Live Dashboard

KPI cards, breakdowns by service, region, and account — refreshed after every scan.

Resource Inventory

Filter by account, region, service, or resource type. Full-text search across names and IDs.

Export Reports

Download inventory as CSV or Excel with per-account summary sheets. Ready for audits and FinOps.

Supported AWS Services

26+ services scanned across every enabled region.

EC2EBSLambdaECSEKSS3EFSRDSDynamoDBElastiCacheRedshiftVPCSubnetsSecurity GroupsALB / NLBNAT GatewayRoute 53CloudFrontAPI GatewaySQSSNSCloudFormationKMSSecrets ManagerACMIAM

Ready to map your cloud?

Deploy in 10 minutes on any VPS. No SaaS required, no data leaves your environment.