Your AWS account outgrew human attention years ago. Agents map it, watch it, and investigate what breaks.
Two hundred services, four consoles deep. Polylane syncs 74 resource types into one graph, reads CloudWatch for you, and fixes what breaks.
Join the waitlistEvery supported resource.
The AWS resource types that show up in your graph.
Lambda Function Lambda Layer 
EC2 Instance 
VPC Subnet Security Group Internet Gateway NAT Gateway Route Table Network ACL EBS Volume Elastic IP 
S3 Bucket 
DynamoDB Table 
RDS Instance 
CloudFront Distribution 
API Gateway REST API API Gateway v2 API 
SQS Queue 
SNS Topic 
ECS Cluster ECS Service ECS Task Definition 
ElastiCache Cluster 
App Runner Service App Runner Connection 
IAM Role 
KMS Key 
Kinesis Stream ElastiCache Replication Group RDS Cluster Service Discovery Service 
Secrets Manager Secret 
EventBridge Rule EventBridge Bus 
Step Functions State Machine 
Redshift Cluster 
Kinesis Firehose 
Neptune Cluster 
Cognito User Pool Cognito Identity Pool 
Athena Workgroup 
Glue Database Glue Crawler Glue Job 
Batch Job Queue Batch Compute Environment 
Amazon MQ Broker 
MSK Cluster 
DocumentDB Cluster MemoryDB Cluster 
CloudTrail Trail GuardDuty Detector 
WAF Web ACL 
ACM Certificate 
EKS Cluster EKS Node Group EKS Fargate Profile EKS Addon EKS Access Entry EKS Identity Provider EKS OIDC Provider Elastic IP 
Elasticsearch Domain OpenSearch Domain EventBridge Pipe 
Amplify App 
Application Load Balancer Network Load Balancer Gateway Load Balancer Target Group Load Balancer Listener Listener Rule Glue Table Attention at AWS scale.
Agents watch the account and investigate without being asked.
From VPCs to Lambdas
Lambda, ECS, RDS, DynamoDB, SQS, SNS, EventBridge, Step Functions, VPCs and everything wired into them, EKS clusters included. 74 resource types land in one graph with their edges, config, and history.
Read-only, by construction
Connecting is one CloudFormation stack that creates an IAM role with the AWS-managed ReadOnlyAccess policy. No write, delete, or modify permissions, cross-account assumption only, and the template is open for review before you create it.
Alarms that investigate themselves
Point your CloudWatch Alarms at Polylane. When one fires, an agent picks it up and starts investigating immediately, so the alarm arrives with an explanation attached.
Agents read CloudWatch so you don't
Agents comb metrics, logs, and X-Ray traces on a cadence and judge what they see against how each resource normally behaves. No thresholds to tune.
Who changed what
Each sync records what appeared, changed, or disappeared across the account. When something breaks minutes after an infrastructure change, the investigation starts from that change.
Investigations that end in a PR
When the root cause is a line of code, the investigation ends in a fix on the repo behind the service, evidence trail attached.
Questions.
How does Polylane connect to my AWS account?
Through a CloudFormation stack. You enter your account ID and region, review the pre-loaded template, and create the stack. It provisions an IAM role that Polylane assumes cross-account, and your resources start syncing within minutes.
Is it really read-only?
Yes. The IAM role carries the AWS-managed ReadOnlyAccess policy and nothing else: no write, delete, or modify permissions, and it can only be assumed cross-account from Polylane's AWS account. The CloudFormation template is open, so you can review exactly what's granted before creating the stack. Changes to your code only ever land as pull requests.
What AWS resources does Polylane sync?
74 resource types: Lambda, EC2, VPC networking, S3, DynamoDB, RDS and Aurora, ECS, EKS (clusters, node groups, Fargate profiles, addons), SQS, SNS, EventBridge, Step Functions, Kinesis, ElastiCache, CloudFront, API Gateway, Cognito, Glue, Redshift, load balancers, and more. The full list is on this page.
What happens when a CloudWatch alarm fires?
If you opt in when connecting, Polylane subscribes to the CloudWatch Alarms in the account. When one fires, an agent picks it up and investigates it automatically, correlating it with recent changes and the surrounding resources in the graph.
Does it work with my observability provider?
Yes. Datadog, Sentry, Honeycomb, and Axiom join the graph as first-class sources, and their alerts get triaged by an agent the moment they fire.
What does it cost?
Pricing is public and self-serve: a free plan, paid plans from $80 a month, and prepaid autofix bundles that never expire. Every plan and limit is published at polylane.com/pricing.