Security Architecture Diagram Generator

Quick Start: Define trust boundaries → Place identity/encryption/firewall icons → Connect with access flows → Group into security zones → Wrap in ```plantuml fence.

⚠️ IMPORTANT: Always use ```plantuml or ```puml code fence. NEVER use ```text — it will NOT render as a diagram.

Critical Rules

• Every diagram starts with @startuml and ends with @enduml
• Use left to right direction for access flows (User → AuthN → AuthZ → Resource)
• Use mxgraph.aws4.* stencil syntax for security service icons
• Default colors are applied automatically — you do NOT need to specify fillColor or strokeColor
• Use rectangle "Trust Boundary" { ... } for security zones
• Directed flows use -->, audit/async flows use ..> (dashed)

Full stencil reference: See stencils/README.md for 9500+ available icons.

Mxgraph Stencil Syntax

mxgraph.aws4.<icon> "Label" as <alias>

Identity & Access Stencils

Encryption & Secrets Stencils

Network Security Stencils

Threat Detection & Compliance Stencils

Connection Types

Quick Example

@startuml
left to right direction
mxgraph.aws4.users "Users" as users
mxgraph.aws4.cognito "Cognito" as auth
mxgraph.aws4.identity_and_access_management "IAM" as iam

rectangle "Protected Resources" {
  mxgraph.aws4.s3 "Data (S3)" as s3
  mxgraph.aws4.encrypted_data "Encrypted" as enc
}

users --> auth : "login"
auth --> iam : "token"
iam --> s3
s3 --> enc
@enduml

Security Architecture Types