Posture, spend & inventory
Which resources can be reached over which CIDRs and ports, via their security groups — worst exposure first. Achieve, AWS.