What are CloudForge Delivery Workspaces?

CloudForge Delivery Workspaces help teams move from a requirement or Designer diagram into reviewable architecture, engineering, and DevOps artefacts. The Architect Workspace creates clarification questions, impact analysis, ADRs, risks, Mermaid diagrams, and delivery backlog items. Engineering and DevOps workspaces prepare implementation and release readiness.

How do Designer diagrams connect to CloudForge Workspaces?

Designer remains the visual source of truth for cloud architecture diagrams. Workspaces explain and prepare the delivery work around that design: Architect Workspace turns requirements into architecture packs and diagrams, Engineering Workspace turns approved architecture into implementation tasks, and DevOps Workspace turns the design into deployment readiness.

CloudForge is a visual cloud infrastructure designer for Azure, AWS, and GCP. You can drag-and-drop cloud resources, pull live Azure and AWS inventories, or describe your architecture in plain English and the AI will generate the diagram. It then produces production-ready Terraform, Pulumi, ARM templates, Bicep, or CloudFormation code automatically.

Does CloudForge have a free trial?

Yes. CloudForge has a trial for evaluation. Paid plans unlock production workflows such as Azure and AWS live resource import, team governance, Terraform and Pulumi generation, drift checks, and priority support.

Which cloud providers does CloudForge support?

CloudForge supports Microsoft Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP) with 100+ resources for each provider. You can design multi-cloud and hybrid architectures in a single interface.

Can CloudForge generate Terraform code automatically?

Yes. CloudForge generates production-ready Terraform code directly from your visual diagrams. It also supports ARM templates, Bicep, and CloudFormation. The generated code follows cloud provider best practices and is ready to deploy.

Does CloudForge have an AI architecture designer?

Yes. The AI Architect lets you describe your infrastructure in plain English (e.g. "a highly available 3-tier web app on Azure with a PostgreSQL database and Redis cache") and instantly generates the full architecture diagram with proper resources, connections, and Terraform code.

Do I need my own API key to use CloudForge AI?

No. CloudForge includes managed AI powered by Anthropic Claude on AWS Bedrock, so you do not need to bring your own API key. AI usage is credit-metered and included with your plan, and you can use the AI Architect, code generation, and self-healing Terraform out of the box.

What is CloudForge Holographic Review Mode?

Holographic Review Mode is an immersive 3D "solar-system" view of your cloud architecture, where resources orbit as an interactive holographic scene. It is designed for stakeholder presentations and design walkthroughs, letting teams explore and review an architecture in three dimensions.

Does CloudForge have a desktop app?

Yes. CloudForge offers a native Windows desktop app (Windows 10/11 x64). Download the zip, extract it, and run CloudForge.exe. A macOS and Linux version are coming soon.

Can I import existing Terraform files into CloudForge?

Yes. CloudForge can parse your existing .tf Terraform files and automatically generate a visual architecture diagram from them. You can then edit the diagram and regenerate the Terraform code.

Is CloudForge a good Cloudcraft alternative?

Yes. CloudForge is a Cloudcraft alternative with AI-powered architecture generation, Terraform and Pulumi export, multi-cloud support for Azure/AWS/GCP, live resource import, and a native Windows desktop app.

Templates/Shared VPC Hub-and-Spoke

Google Cloud

Networking

advanced

Shared VPC Hub-and-Spoke — Google Cloud Architecture Template

A hub VPC with HA VPN to on-prem, peered prod and dev spoke VPCs, centralized NAT, and private DNS.

Why this architecture works

Centralizing hybrid connectivity in the hub means one VPN estate instead of one per environment.
Prod and dev spokes are isolated from each other by default; all cross-traffic transits the hub policy point.
Shared Cloud NAT in the hub gives audited, centralized egress without public IPs on workloads.
Private Cloud DNS zones resolve consistently across hub, spokes, and on-prem.
Network-admin IAM on the hub separates network governance from workload teams.

What's inside (10 resources)

HA VPN to On-Prem

gcp-cloud-vpn

Private DNS

gcp-cloud-dns

Hub VPC

gcp-vpc

Central Cloud NAT

gcp-cloud-nat

Spoke VPC - Prod

gcp-vpc

Spoke VPC - Dev

gcp-vpc

Prod Workloads

gcp-compute-engine

Dev Workloads

gcp-compute-engine

Network Admin IAM

gcp-iam

Cloud Monitoring

gcp-monitoring

From template to running infrastructure

Open this template in the CloudForge visual designer (free account, no credit card).
Customize resources, names, and connections on the drag-and-drop canvas — or ask Vani, the AI architect, to adapt it.
Generate production-ready Terraform or Pulumi in one click.
Review the plan diff and security scan, then deploy with human approval.

Related architecture templates

Landing Zone Network Foundation

Google Cloud · Networking

Hybrid Connectivity via HA VPN

Google Cloud · Networking

Private Service Access

Google Cloud · Networking

Hub-Spoke with Transit Gateway

AWS · Networking