AXIOM THREAT DESK · DATA FLOW DIAGRAM CANVAS
Interactive Data Flow Diagram (DFD v4.2) Studio
Inspect trust boundaries, external entities, microservices, and data stores. Every cross-boundary flow is verified for mutual TLS, token pinning, and encryption in transit.
TRUST BOUNDARY LEDGER
Cross-Boundary Data Flows & Encryption Posture
DFD-01External Client Browser → Public API Gateway
Boundary: Internet -> DMZ VPC · Transport: TLS 1.3 (HTTPS)
DFD-02Public API Gateway → Auth Service (OIDC/JWT)
Boundary: DMZ VPC -> App Mesh · Transport: Envoy mTLS + RS256
DFD-03Public API Gateway → Customer_PII_DB (Postgres)
Boundary: DMZ VPC -> Data Enclave · Transport: TCP 5432 (Missing mTLS)
DFD-04Worker Queue Service → Audit WORM S3 Bucket
Boundary: App Mesh -> Storage VPC · Transport: IAM Role + KMS CMK