FlowDiagram
39 templates

Cloud & DevOps infrastructure templates

Deployment topologies, CI/CD pipelines and network zones. Every one opens as a real, editable diagram — restyle it, extend it and export it as your own. See also the system architecture diagram tool.

All 39 cloud & devops infrastructure templates

Developer pu…Open pull re…Lint & unit…Code review…Merge to mainBuild contai…

CI/CD pipeline

Commit to production, with a gate before the deploy.

Mermaid
Internet use…DNSCDN & WAFInternet gatewayLoad balance…App server:…

Cloud VPC with public/private subnets

A load balancer in a public subnet, app and data tiers private.

Mermaid
UsersCloud load bala…Ingress cont…cert-manager…Service: fro…Service: api

Kubernetes deployment topology

Ingress, services and pods across a cluster.

Mermaid
New release…Build & testDeploy to gr…DB migration…Stop: split…Smoke tests…

Blue-green deployment

Two production environments with traffic switching between them.

Mermaid
UsersGlobal DNS w…Primary regi…Standby regi…App tierApp tier, sc…

Multi-region disaster recovery

Primary and standby regions with replicated data.

Mermaid
Client appCDNAPI GatewayAuthorizer:…Function: ge…Function: cr…

Serverless API architecture

API gateway, functions and a managed database — no servers to run.

Mermaid
InternetDDoS protect…Perimeter firew…DMZ: reverse…Internal firewa…App zone

Network security zones

DMZ, internal and restricted zones with firewalls between them.

Mermaid
UsersRoute 53CloudFront + AW…S3: React SPAAPI GatewayCognito user po…

AWS serverless web application

CloudFront, S3, API Gateway, Lambda, DynamoDB, Cognito, EventBridge and Step Functions — a fully managed AWS web backend with no servers to patch.

Mermaid
RDS & AuroraAWS DMS CDCSaaS appsAppFlowClickstreamKinesis Data St…

AWS modern data platform

DMS, Kinesis, Glue, S3 lakehouse with Iceberg, Lake Formation, Redshift, Athena, QuickSight and SageMaker.

Mermaid
UsersCloudFrontALB ingress…Amazon EKS clus…Catalog serviceCart service

AWS microservices on EKS

EKS with ALB ingress, Karpenter, App Mesh or Istio, Aurora, ElastiCache, MSK, Secrets Manager and CloudWatch.

Mermaid
EmployeesWeb app on Ampl…CognitoAPI GatewayLambda orchestr…Bedrock Agent

AWS generative AI with Bedrock

A RAG assistant on Bedrock: Knowledge Bases over S3, OpenSearch Serverless vectors, Bedrock Agents with Lambda tools, and Guardrails.

Mermaid
UsersAzure Front Doo…Microsoft Entra…App Service / C…Azure SQL Datab…Azure Cache for…

Azure web application reference

Front Door, App Service or Container Apps, Azure SQL, Redis, Service Bus, Functions, Key Vault, Entra ID and Application Insights.

Mermaid
SAP & ERPsData Factory pi…SQL Server on-p…Self-hosted…Apps & IoTEvent Hubs

Azure modern data platform (Fabric)

Data Factory, Event Hubs, OneLake, Fabric Lakehouse and Warehouse, Purview governance, Power BI and Azure Machine Learning.

Mermaid
UsersFront DoorApplication…AKS clusterProduct serv…Basket servi…

Azure microservices on AKS

AKS behind Application Gateway, with Dapr, Service Bus, Cosmos DB, Azure SQL, Key Vault, Azure Monitor and GitOps (Flux).

Mermaid
EmployeesTeams or web…Container Ap…Entra ID: us…Prompt Flow…Azure AI Search…

Azure OpenAI RAG chat

Azure OpenAI with AI Search hybrid retrieval over SharePoint and Blob content, Prompt Flow, content safety and Entra security trimming.

Mermaid
UsersCloud Load Bala…Cloud CDNCloud Storage:…Cloud Run: APIIdentity Pla…

Google Cloud serverless app (Cloud Run)

Cloud Load Balancing, Cloud Run services, Firestore, Cloud SQL, Pub/Sub, Cloud Tasks, Identity Platform and Cloud Monitoring.

Mermaid
UsersGlobal load bal…GKE GatewayGKE AutopilotFrontend ser…Checkout ser…

Google Cloud microservices on GKE

GKE Autopilot with Gateway API, Cloud Service Mesh, Spanner, Memorystore, Pub/Sub, Artifact Registry and Cloud Deploy.

Mermaid
CustomersWeb & mobile appCloud Run: agen…Vertex AI Agent…Gemini modelVertex AI Searc…

Google Cloud generative AI (Vertex AI)

Gemini on Vertex AI with Vertex AI Search grounding, Agent Builder tools, BigQuery data and model evaluation.

Mermaid
Central iden…One CI/CD pi…AWS: customer-f…Cloud interconn…Azure: Microsof…GCP: BigQuery a…

Multi-cloud architecture (AWS + Azure + GCP)

Workloads split across three clouds with a common identity, network interconnect, observability and a single deployment pipeline.

Mermaid
UsersRoute 53CloudFront + WAFS3 static assetsApplication Loa…ECS tasks AZ-a

AWS three-tier web app reference

Route 53, CloudFront, ALB, auto-scaling EC2 or ECS across two AZs, RDS Multi-AZ, ElastiCache and S3 — the classic AWS reference architecture.

Mermaid
Management grou…On-premisesExpressRoute /…Hub VNetAzure FirewallBastion

Azure landing zone (hub-and-spoke)

Management groups, hub VNet with firewall and shared services, spoke VNets per workload, and policy guardrails.

Mermaid
Apps & servicesPub/SubCloud SQLDatastream CDCCloud Storage l…Dataflow stream…

Google Cloud serverless data platform

Pub/Sub, Dataflow, BigQuery, Cloud Composer and Looker in a serverless analytics stack.

Mermaid
DeveloperApp repo PRCI: test, bu…Container re…Bot updates…Config repo:…

GitOps delivery with Argo CD

Git as the source of truth: app repo CI builds images, a config repo is updated, and Argo CD syncs clusters.

Mermaid
Engineer edi…Open pull re…terraform fm…terraform pl…Policy as co…Policy viola…

Infrastructure as code (Terraform) workflow

Plan in pull requests, policy checks, approval and apply with remote state and drift detection.

Mermaid
DevelopersDeveloper po…Golden-path…New Git repo…CI pipelinesRegistry

Internal developer platform on Kubernetes

Developer portal, golden-path templates, CI/CD, secrets, observability and multi-tenant clusters.

Mermaid
Instrumented…OpenTelemetr…Nodes & cont…Prometheus m…Log storeTrace store

Observability stack (metrics, logs, traces)

OpenTelemetry collectors feeding metrics, logs and traces backends, with dashboards, SLOs and alert routing.

Mermaid
Region outag…Expected rec…Wait & commu…Incident com…Freeze deplo…Promote stan…

Disaster recovery failover runbook

Declaring a regional disaster, promoting the standby, validating, and failing back — with RTO/RPO checkpoints.

Mermaid
Signed commitCI build in…Approved bas…Fail buildGenerate SBOMVulnerabilit…

Container supply-chain security

Signed builds, SBOMs, vulnerability scanning and admission control from commit to cluster.

Mermaid
User uploads…S3 upload bucketEventBridge ruleStep Functions…Lambda: validateValid?

Serverless event-driven processing

S3 uploads trigger functions, Step Functions orchestration, retries and notifications — fully managed.

Mermaid
Monthly clou…Cost & usage…Enforce tagg…Untagged spe…Chase owners…Allocate cos…

Cloud cost (FinOps) governance loop

Tagging, allocation, budgets, anomaly alerts and optimisation actions across teams.

Mermaid
Pull requestCompute chan…Project depe…Affected pro…Remote cache…Reuse build…

Monorepo CI with affected-project builds

Only building and testing what changed in a large monorepo, with remote caching and parallel jobs.

Mermaid
On-prem data…Core routersAWS Direct Conn…Azure ExpressRo…Backup IPsec…AWS Transit Gat…

Hybrid cloud network architecture

On-prem data centre connected to AWS and Azure with dedicated links, transit hubs, DNS and centralised egress.

Mermaid
Upgrade plan…Create green…Logical repl…Replication…Run app test…Tests pass?

Database major-version upgrade with blue/green

Upgrading a production database with logical replication to a green cluster and a fast switchover.

Mermaid
Sensors & ca…Edge node at…Local ML inf…Local action…Local bufferUplink avail…

Edge computing architecture

Workloads at edge locations with local processing, store-and-forward sync and central management.

Mermaid
Application…Workload ide…Secrets vaultIdentity & p…Deny & alertIssue dynami…

Secrets management architecture

Central vault issuing dynamic, short-lived credentials to apps via workload identity, with rotation and audit.

Mermaid
Nightly sche…Deploy lates…Seed product…Warm-up traf…Ramp to targ…Soak test 1…

Performance & load testing pipeline

Nightly load tests against staging with baselines, regression detection and capacity reporting.

Mermaid
Traffic incr…Metrics serv…CPU or RPS o…HPA adds pod…Queue depthKEDA event s…

Kubernetes autoscaling layers

How pod autoscaling, event-driven scaling and cluster autoscaling work together under load.

Mermaid
Patch TuesdayAssess patch…Ring 0: test…Issues?Exclude patc…Ring 1: dev…

Server patch management cycle

Monthly OS patching across environments with staged rings, maintenance windows and compliance reporting.

Mermaid
Production d…Hourly snaps…File storageLocal backup…Cross-region…Immutable of…

Backup & restore strategy (3-2-1)

Snapshots, cross-region copies, immutable backups and regular restore tests.

Mermaid

Other template categories