Product demonstrations

Inspect the path. Review the evidence.

The technical views below use illustrative scenarios and sample data. They do not show a live customer environment or represent actions taken in an AWS account.

Illustrative AWS scenario

A path, assembled from connected resources.

Sample resource names and events are shown for explanation only. Validation and closure states in this view are not live results.

01See
02Chain
03Prove
04Review
INTERNETPublic0.0.0.0/0ALBEdge LBalb-prod-edgeEC2App serveri-0a3f2c8dIAM ROLEsvc-appsvc-app-prodTARGETProd DBprod-postgresHTTP 443forwardsts:AssumeRolerds:ConnectSAMPLEIllustrative closure stateSample result · 4 modeled hops
ILLUSTRATIVE PATH · 4 HOPS·SAMPLE AWS EVENTS
  1. 01 · Internet ingress0.0.0.0/0 · HTTPS 443Observed in sample
  2. 02 · Load balanceralb-prod-edgeSample resource
  3. 03 · Application workloadi-0a3f2c8dSimulated relationship
  4. 04 · Workload identitysvc-appSimulated relationship
  5. 05 · Sensitive serviceprod-postgresUntested in this illustration

Evidence states

Each step on a path is labeled by what was checked.

Configuration observation — a setting read from AWS metadata, such as a security group rule. Permission simulation — an IAM policy evaluation result for a principal and action; it shows what policy allows, not that an action was performed. Untested — no validation result is implied. A recorded request ID or hash shows that evidence was collected and has not been altered; on its own it does not show an attack succeeds.