If you've ever inherited an AWS account, you know the feeling. You open the console, click around a few services, and realise pretty quickly that you have no idea what's actually running. EC2 instances nobody recognises. Security groups with ports...