Introduction
The Four-Question Framework for Threat Modeling

Import from Infrastructure as Code (IaC), Diagramming Tools and more

4
min
Last updated
September 18, 2024

Users can directly import external files—including Infrastructure as Code (IaC), Visio, LucidChart, and DrawIO diagrams—straight into IriusRisk through the user interface.

Imagine this: you’ve just mapped out a complex threat model in Visio, or you’ve defined your infrastructure in a well-crafted IaC file. Instead of switching gears, firing up an API client, and navigating through endpoint calls, you can now stay in the flow of your work. Simply navigate to the new Import option within IriusRisk’s UI, select your file, and watch as it seamlessly integrates into your project.

Custom mapping files are still possible too - using an API call

In addition, if you require use of a mapping file, this is possible too, via the use of an API tool such as Postman. In future development this type of activity will become possible directly within our UI. Let us use Lucidchart as an example, with the below diagram that we have exported as a vsdx.

Then we can use an API call - in this case, Postman - to upload this Lucidchart file to automatically create a new threat model in IriusRisk for this example AWS architecture. 

Step 1: Select the Lucidchart API endpoint

Step 2: Set the API request parameters 

Step 3: Send the API request

Step 4: Review the generated threat model in IriusRisk

If you log in in the IriusRisk UI, you'll see that a new threat model was automatically created based on our Lucidchart template architecture:

This is what the IriusRisk diagram view looks like for the generated threat model after following the steps above. You can get this very file from our Github Repo if you’d like to try it. Find it here: Lucidchart file in Github:

Close Modal