If a company is running in the Cloud and their Security team isn't aware of this then they shouldn't be considered a Security team. Their only goal is to be aware of their environment to safe guard it. The second you don't know where your servers are or where they are hosted and the implications behind them you cease being part of Security.