Skip to content

v0.3

Choose a tag to compare

View all tags
@ZiadElraggal ZiadElraggal released this 13 Apr 02:44
· 24 commits to main since this release
v0.3
3919a7b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

StackMap 0.3.0 Release Notes

StackMap 0.3.0 turns the project from an infrastructure diagram generator into a much stronger live AWS architecture explorer. This release adds evidence-rich relationship inference, smarter grouping, cost and billing workflows, live logs, drift detection, dependency tracing, findings, and Windows release automation.

Highlights

  • Added live AWS relationship inference that turns raw account inventory into architecture edges such as API Gateway to Lambda, Lambda/ECS to DynamoDB/S3/SQS/SNS from IAM policies, event sources to Lambda, Route53 to CloudFront/ALB/API Gateway, and ALB target groups to ECS services.
  • Added evidence-rich edge metadata with inference rule names, confidence levels, human-readable evidence, and source AWS API calls so users can inspect why generated relationships exist.
  • Improved smart grouping for live AWS accounts using CloudFormation/SAM tags, business tags, high/medium-confidence service graphs, API entrypoint expansion, naming families, and VPC fallback grouping.
  • Added dependency tracing from the UI detail panel, with upstream/downstream paths and graph highlighting.
  • Added suspicious-pattern findings, including backend analysis modules and a frontend findings panel.
  • Added drift detection between desired and live snapshots, including normalized comparison, resource/relationship drift, drift badges, and summary UI.
  • Added cost forecasting with per-resource usage overrides, component/category breakdowns, and recalculation support.
  • Added optional AWS billing and CloudWatch usage imports with separate IAM policy generation, including support for current-vs-forecast workflows and CloudFront usage replacement.
  • Added optional live CloudWatch log viewing for selected resources or all visible resources, gated behind --live-logs and a separate reviewable IAM policy.
  • Added UI controls for cost overlays, drift mode, findings, traces, live logs, low-confidence edges, and inferred relationship evidence.
  • Added Windows release automation that builds and uploads a standalone stackmap.exe zip on GitHub Release publish.
  • Expanded tests across relationship inference, cost estimation, drift normalization/engine, dependency tracing, findings, grouping, and live AWS scanner behavior.

User-Facing Commands

No new required workflow is introduced. Existing commands remain the main entrypoints:

stackmap scan --source terraform.tfstate --format json --output stackmap-output.json
stackmap scan-repo . --output stackmap-repo-output.json
stackmap scan-aws --profile dev --output aws-output.json --serve
stackmap serve --source stackmap-output.json
stackmap serve --source desired.json --drift-against live.json
stackmap diff before.json after.json --output stackmap-diff.json

Optional live AWS features are explicitly enabled:

stackmap scan-aws --profile dev --serve --live-logs
stackmap scan-aws --profile dev --serve --live-billing

Optional IAM policies are separate from the default scan policy:

stackmap aws-policy
stackmap aws-policy --addon logs
stackmap aws-policy --addon billing

Notes For Upgrading

  • Default AWS scans remain read-only and do not require live logs or billing permissions.
  • Live logs require --live-logs, a single AWS profile, and the separate logs policy.
  • Live billing and usage imports require --live-billing, a single AWS profile, and the separate billing policy.
  • Inferred live edges can now include metadata. Older IR files without edge metadata still load normally.
  • Low-confidence edges are filterable in the UI so architecture mode can stay focused on stronger functional relationships.
Assets 4
Loading