That's quite a nice balance between "auto import and connect everything, dven the stuff you don't want e.g Terraform" and "set it all up yourself".

I'd like to add to that suggestion, let me dis/allow resources from thr automated import with a grep patterm e.g. aws.iam* would allow only iam policies into the import. Negations and such are logical extensions.