Agreed. In AWS for example you can add name/tags to things. Would be cool if it could import all of the stuff like “Name:project” and then attempt to flow it out. It could also read firewall and port settings to determine what’s public facing. Maybe as an added value it could scan related s3 buckets and try to visualize their settings as well. You could more easily see that buckets are u intentionally public or not.

Cool ideas!

I'm sure they will, if it looks like 3rd party services are making money at it.

This is the problem with building your product on one of these platforms: you're just doing their market research for them for free.