Org & App Tree
On the [Org & App Tree] page, you can browse the organization hierarchy and the applications each team owns — all the way down to leaf nodes.
Page Layout
The page is divided into two areas:
| Area | Description |
|---|---|
| Tree Panel (left) | Unified tree displaying both Organizations and Applications in a single hierarchy. Organizations appear at the top level; Applications nest beneath them |
| Detail Card (right) | Summary information of the selected node — metrics, basic info, and a link to the full detail page |
Viewing the Tree
The tree panel shows the full Organization → Application hierarchy. The header displays total counts (e.g., 72 orgs · 40 apps).
| Feature | Description |
|---|---|
| Organization nodes | Shown with a building icon. Selecting one displays organization summary metrics |
| Application nodes | Shown with a box icon. Leaf applications are the lowest level where resources are mapped |
| Expand / Collapse | Click the arrow on a parent node to show or hide children. Children are loaded lazily |
| Collapse all | Click the collapse button in the tree header to close all expanded nodes |
| Add child (+) | Hover over an application node to reveal a + button for creating a child application |
| Count badges | Parent application nodes show the number of child applications |
Search and Filters
| UI Element | Description |
|---|---|
| Search | Search organizations or applications by name |
| All types | Filter by node type — All types, Organizations, or Applications |
| All status | Filter by status — All status, Active, or Inactive |
Types Filter
Click [All types] to filter the tree by node type.
Status Filter
Click [All status] to filter by active or inactive status.
Selecting an Organization
Click an organization node in the tree to view its summary card. The card displays a Root badge and provides the following tabs.
Summary
Key metrics at a glance — Total Cost, Budget vs Actual, Organizations, Applications, Open Alerts, Cloud Accounts. Basic Info and Members section below.
Members
View and manage organization members. Search by name or email, and add new members with [+ Add Member].
Assigned Applications
Applications assigned to this organization, shown with count badge.
Cost Attribution
Cost breakdown for this organization.
Budget
Budget information for this organization.
Click [View Details] to navigate to the full organization detail page.
Selecting an Application
Click an application node in the tree to view its summary card. The card displays the application type badge (Leaf App or Parent App), status (Active / Inactive), and ID.
Summary
Key metrics — Management Org, Cost (30d Effective), Resources, Mapping Rules, Open Alerts, Parent App. Basic Info and Mapping Rules section below.
Architecture
Architecture topology view of the application’s resources. Shows the network relationship graph between resources mapped to this application.
Assigned Resources
Resources mapped to this application. Search by resource name, filter by provider, and assign new resources with [Assign Resource].
Mapping History
History of resource mapping changes for this application.
Click [View Details] to navigate to the full application detail page.
Creating an Organization
Click [+ Create] and select Organization
Click the [+ Create] button at the top right, then select Organization.
Fill in the organization details
| Field | Required | Description |
|---|---|---|
| Organization Name | Yes | Name of the new organization |
| Description | No | Purpose or description (max 500 characters) |
| Status | Yes | Initial status — Active or Inactive |
| Parent Organization | No | Select a parent to nest under an existing organization. If omitted, created as a root organization |
The Path indicator below the parent selector shows the full hierarchy path.
Click [Create]
Click [Create] to save. The new organization appears in the tree.
Creating an Application
Click [+ Create] and select Application
Click the [+ Create] button at the top right, then select Application.
Fill in the application details
| Field | Required | Description |
|---|---|---|
| Application Name | Yes | Name of the new application |
| Purpose | No | Description of the application’s purpose (max 500 characters) |
| Organization | No | Select the owning organization |
| Parent Application | Yes | Select a parent application to nest under. Determines the tree position |
| Application Manager | No | Assign a manager for this application |
| Notification Recipients | No | Managers are added automatically. Toggle each recipient on or off, or add more users |
Click [Create]
Click [Create] to save. The new application appears in the tree under the selected parent.
Application Detail Page
Click [View Details] on an application card to open the full detail page. The header shows the application name, type badge, status, and action buttons (Move, Edit, Delete).
Summary
Key metrics at the top — Management Org, Cost (30d Effective), Resources, Mapping Rules, Open Alerts, Parent App. Below are three sections:
| Section | Description |
|---|---|
| Basic Info | Application Name, ID, Type (Leaf/Parent), Parent Application, Management Organization, Application Manager, Purpose |
| Mapping Rules | Active mapping rules linked to this application |
| Assigned Resources | Preview of resources mapped to this application with count |
Architecture
Automatically visualizes the network topology of resources mapped to the Application. No need to draw diagrams manually — infrastructure is rendered based on collected resources and their relationships.
Layer Structure
The canvas is organized into 5 layers from top to bottom, representing the traffic flow order.
| Layer | Meaning | Representative Resources |
|---|---|---|
| EDGE | External entry point | Route 53, CloudFront |
| INGRESS | Gateway into the VPC | ALB, NLB, API Gateway |
| APPLICATION | Compute and app execution | EC2, Lambda, EKS Node |
| DATA | Storage, cache, messaging | RDS, ElastiCache, S3, DynamoDB |
| NETWORK | Egress and internal routing | NAT Gateway, VPC Endpoint |
VPC Isolation
Each VPC is displayed as a vertical column representing network isolation boundaries. Global services not bound to a VPC (Route 53, CloudFront, etc.) are placed outside the VPC columns.
Node Aggregation
Resources with the same (VPC, layer, service type) are grouped into aggregation cards displayed as ×N. Click an aggregation card and select Expand on canvas to see individual resources, or Collapse on canvas to group them again.
Connection Types
Connections between resources are displayed as lines, with different styles depending on the connection type.
| Type | Style | Meaning |
|---|---|---|
| Confirmed | Solid line | Explicit connection — target ID/ARN is directly referenced in configuration |
| Inferred | Dashed line | Inferred connection — derived from security group rules as an allowed path |
Bidirectional connections (A↔B) between the same node pair are merged into a single line with arrows at both ends.
Display Controls
Adjust view options in the display controls panel at the top-left of the canvas.
| Control | Description |
|---|---|
| Layer toggle | Show or hide specific layers |
| Show connections | Toggle all connection lines on/off |
| Confirmed / Inferred | Toggle solid (Confirmed) or dashed (Inferred) connections individually |
| Show labels | Toggle node and edge labels |
| Expand all | Expand all aggregation cards to individual resources (shows Collapse all when expanded) |
Node Selection
Clicking a node opens a detail panel on the right and highlights only the directly connected neighbor nodes, making it easy to trace the impact range at a glance. Nodes with active alerts display severity indicators.
Assigned Resources
Full table of resources mapped to this application. Search by resource name, filter by provider, and manage assignments.
Mapping History
History of resource mapping changes — shows when resources were assigned or unassigned, by which rule, and the result.
| Column | Description |
|---|---|
| Executed At | Timestamp of the mapping action |
| Mapping Type | Source of the mapping — Rule (automatic) or Manual |
| Rule Name | Name of the mapping rule (for Rule type) |
| Resource Name | Affected resource |
| Status | Result — Success or Fail |
| Reason / Error | Failure reason (if applicable) |
Alerts
Active alerts related to resources in this application.
Cost Attribution
Cost breakdown for this application — view costs by service, account, or time period.
Settings
Application settings — manage notification recipients, tags, and other configurations.
