Graffin
Graffin.ai provides a CLI-first platform that maps live cloud resources, real cost data, and infrastructure-as-code into a single explorable graph. It connects Terraform intent, actual cloud state, and Cost Explorer billing data to reveal dependencies, drift, and resource-level costs. The tool uses metadata-only sync with minimal read-only IAM permissions, requiring no writes to the user's cloud account.
- Artificial Intelligence
- Developer Tools
- Software Only
Funding
Founders
Product
Problem
Platform engineering teams struggle to maintain a complete mental model of their cloud infrastructure because Terraform definitions, live cloud resources, and cost data exist in separate silos. No single tool connects what was intended, what is actually running, and what it truly costs, forcing teams to rely on individual "infra brains" and manual correlation across multiple consoles.
Solution
Graffin turns live cloud resources, real cost data, and infrastructure-as-code into one explorable graph, eliminating the need for any single person to hold the full infrastructure picture. The platform maps every Terraform resource to the actual cloud resource it created, showing what is managed, what has drifted, and what exists outside Terraform entirely. It also visualizes dependencies between resources, allowing teams to see which services depend on a NAT gateway or what breaks if a VPC endpoint is removed. Graffin attributes actual Cost Explorer data to specific resources, with honest confidence levels when attribution is uncertain, rather than relying on estimates or tags. The tool is CLI-first, installs as a single binary with one curl command, and performs metadata-only sync with strictly scoped read-only IAM permissions.
Target Audience
Primary users are platform engineering teams who need to onboard new engineers faster, optimize cloud costs safely, and provide their AI agents with accurate infrastructure context.
Features
- Every Terraform resource mapped to its corresponding live cloud resource, with drift detection and identification of resources outside Terraform
- Dependency graph visualization showing relationships between resources, such as which services depend on a NAT gateway or VPC endpoint
- Real Cost Explorer data attributed to specific resources, with confidence levels when attribution is uncertain
- CLI-first design with a single binary installation requiring no dependencies
- Metadata-only sync that never writes to the cloud account, using minimal IAM permissions limited to Describe* actions
- Support for AWS, GCP, and Azure cloud providers