Abstract: An access policy analysis system may use visual exploration to efficiently perform access analysis. A request to display an effective access of an entity with respect to a resource hosted in a cloud provider may be received via a visual exploration user interface element. An analysis of a set of access policies applied by an access management system to determine an effective access of the entity with respect to the resource may be performed. One or more selectable access policy interface elements may be generated that correspond to one or more access policies of the set of access policies that are used to determine the effective access of the entity with respect to the resource. The one or more selectable access policy interface elements may be included in a display of the visual exploration user interface element along with the determined effective access of the entity with respect to the resource.

Abstract: A system and method for generating a visualization of cloud-based computing system based on a domain-specific language file is provided. In one or more examples, the domain-specific language file is compiled so as to generate a data file. The data file is parsed to generate an intermediate file that converts the computing resources found in the data file into symbolic representations. The intermediate file is then processed so as to produce a position for each symbol within the symbolic representation. Finally, the symbolic representation is rendered using a markup language such as HTML.