What are CloudForge Delivery Workspaces?

CloudForge Delivery Workspaces help teams move from a requirement or Designer diagram into reviewable architecture, engineering, and DevOps artefacts. The Architect Workspace creates clarification questions, impact analysis, ADRs, risks, Mermaid diagrams, and delivery backlog items. Engineering and DevOps workspaces prepare implementation and release readiness.

How do Designer diagrams connect to CloudForge Workspaces?

Designer remains the visual source of truth for cloud architecture diagrams. Workspaces explain and prepare the delivery work around that design: Architect Workspace turns requirements into architecture packs and diagrams, Engineering Workspace turns approved architecture into implementation tasks, and DevOps Workspace turns the design into deployment readiness.

CloudForge is a visual cloud infrastructure designer for Azure, AWS, and GCP. You can drag-and-drop cloud resources, pull live Azure and AWS inventories, or describe your architecture in plain English and the AI will generate the diagram. It then produces production-ready Terraform, Pulumi, ARM templates, Bicep, or CloudFormation code automatically.

Does CloudForge have a free trial?

Yes. CloudForge has a trial for evaluation. Paid plans unlock production workflows such as Azure and AWS live resource import, team governance, Terraform and Pulumi generation, drift checks, and priority support.

Which cloud providers does CloudForge support?

CloudForge supports Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP) with 100+ resources for each provider. You can design multi-cloud and hybrid architectures in a single interface.

Can CloudForge generate Terraform code automatically?

Yes. CloudForge generates production-ready Terraform code directly from your visual diagrams. It also supports ARM templates, Bicep, and CloudFormation. The generated code follows cloud provider best practices and is ready to deploy.

Does CloudForge have an AI architecture designer?

Yes. The AI Architect lets you describe your infrastructure in plain English (e.g. "a highly available 3-tier web app on Azure with a PostgreSQL database and Redis cache") and instantly generates the full architecture diagram with proper resources, connections, and Terraform code.

Do I need my own API key to use CloudForge AI?

No. CloudForge includes managed AI powered by Anthropic Claude on AWS Bedrock, so you do not need to bring your own API key. AI usage is credit-metered and included with your plan, and you can use the AI Architect, code generation, and self-healing Terraform out of the box.

What is CloudForge Holographic Review Mode?

Holographic Review Mode is an immersive 3D "solar-system" view of your cloud architecture, where resources orbit as an interactive holographic scene. It is designed for stakeholder presentations and design walkthroughs, letting teams explore and review an architecture in three dimensions.

Does CloudForge have a desktop app?

Yes. CloudForge offers a native Windows desktop app (Windows 10/11 x64). Download the zip, extract it, and run CloudForge.exe. A macOS and Linux version are coming soon.

Can I import existing Terraform files into CloudForge?

Yes. CloudForge can parse your existing .tf Terraform files and automatically generate a visual architecture diagram from them. You can then edit the diagram and regenerate the Terraform code.

Is CloudForge a good Cloudcraft alternative?

Yes. CloudForge is a Cloudcraft alternative with AI-powered architecture generation, Terraform and Pulumi export, multi-cloud support for Azure/AWS/GCP, live resource import, and a native Windows desktop app.

Templates/Private-Subnet-Everything App

AWS

Networking

intermediate

Private-Subnet-Everything App — AWS Architecture Template

Only the ALB is public; app servers, database, and storage all live in private subnets with NAT-only egress.

Why this architecture works

App instances have no public IPs — the ALB is the sole internet-facing component
NAT Gateway allows outbound patching and API calls while blocking all unsolicited inbound traffic
The database accepts connections only from the app tier's security group, not from CIDR ranges
Secrets Manager access happens over the VPC network, so credentials never transit the public internet
Security-group references (not IP rules) keep the trust chain intact as instances scale

What's inside (8 resources)

VPC

aws-vpc

Public ALB

aws-alb

NAT Egress

aws-nat-gateway

Private App Servers

aws-ec2

Private Database

aws-rds

App Secrets

aws-secrets-manager

Private Assets

aws-s3

Monitoring

aws-cloudwatch

From template to running infrastructure

Open this template in the CloudForge visual designer (free account, no credit card).
Customize resources, names, and connections on the drag-and-drop canvas — or ask Vani, the AI architect, to adapt it.
Generate production-ready Terraform or CloudFormation in one click.
Review the plan diff and security scan, then deploy with human approval.

Related architecture templates

Hub-Spoke with Transit Gateway

AWS · Networking

Landing Zone Network

AWS · Networking

Hybrid VPN Connectivity

AWS · Networking

Hub-Spoke Network Topology

Azure · Networking