Duo built CloudMapper to generate interactive network diagrams of AWS accounts and released it as open source ... display is where most of the logic is. This is where the Security Groups are analyzed ...