Practical overview
When it fits
Use it for an on-demand review of AWS infrastructure code or a diagram when you want findings tied to Well-Architected practices and a way to explore remediation priorities.
Who it is for
- Cloud architects reviewing AWS infrastructure designs against Well-Architected guidance.
- Development teams assessing CloudFormation, Terraform or AWS CDK projects.
- Reviewers who need to discuss assessment findings or prioritize improvement work.
Documented uses
- Assess IaC files or complete projects against AWS Well-Architected practices.
- Evaluate an architecture diagram and generate a corresponding IaC template.
- Add supporting documents to provide context for an assessment.
- Explore recommendations, prioritize findings and export review fields to CSV.
Requirements & limits
The repository is public and licensed under MIT-0. The documented deployment options are a CloudFormation stack, deployment script or manual deployment. The project README describes it as a non-production sample and says maintenance will continue mainly for security patching.
- The tool evaluates submitted design artifacts; the README distinguishes it from the AWS Well-Architected Agent, which it describes as analyzing live AWS environments.
- The CloudFormation deployment option requires a region with access enabled for the selected Amazon Bedrock model.
- The default load balancer is internet-facing with authentication enabled; internal access requires network connectivity to the deployed VPC.
- The README says the sample is intended for non-production use and recommends organizational security and legal review before deployment.
Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.
Deploy the analyzer with CloudFormation
Create a deployment environment for the analyzer using the documented CloudFormation stack option.
Before you start
- An AWS account and access to the AWS CloudFormation console.
- A deployment region where access to the selected Amazon Bedrock model has been enabled.
- The project’s CloudFormation deployment-stack template.
Steps
Download the iac-analyzer-deployment-stack.yaml template from the project repository.
Open the AWS CloudFormation console in the region where model access is enabled.
Create a stack by uploading the template, then enter or adjust the stack name and parameters.
Keep authentication enabled if using the default internet-facing load balancer; configure the documented parameters as needed.
Expected outcome
A CloudFormation stack provisions a deployment environment for the analyzer.
Guide limitations
- The project is described as a non-production sample; consult organizational security and legal teams before deployment.
- The default load balancer is internet-facing. Disabling authentication for a public deployment would leave the application publicly accessible without security controls.
- Access to an internal load balancer requires network connectivity to the deployed VPC.
- Confirm that the selected Bedrock model is available in the deployment region.
Sources & review
Source record details
- Source availability
- Active
- Sources checked
- 14 October 2026
- Original website title
- aws-samples/well-architected-iac-analyzer · Official homepage title · retained in its source language
Related options
AWS Well-Architected Agent — The project README identifies this AWS service as another option, describing it as covering on-demand architecture reviews and continuous analysis of live AWS environments.

