1. A system for inferring a service architecture to facilitate analysis and monitoring of a widely distributed service operated by an Infrastructure-as-a-Service (IaaS) tenant but deployed on a set of virtual resources controlled by an independent IaaS provider and allocated to the IaaS tenant, in which the distributed service may be at least one of geographically dispersed, part of different communication networks, and disjoint, wherein the IaaS provider is responsible for selection of the set of virtual resources, wherein an operational capacity of the set of virtual resources may change substantially and rapidly, and wherein the IaaS tenant has no direct control over, and limited visibility into, the selection of the set of virtual resources, the system comprising: a non-transitory processor readable storage media storing instruction executable by a processor; a processor in data communication with the non-transitory processor readable storage media and that up such execution of the instructions stored on the non-transitory processor readable store media performs the operations of: collect metadata, the metadata comprising (i) IaaS-provider metadata expressed in a fixed format, the fixed format being prescribed by the IaaS provider, the IaaS-provider metadata characterizing the set of virtual resources then being used by the distributed service, and (ii) IaaS-tenant metadata expressed in arbitrary text specific to the IaaS tenant that the IaaS tenant uses to characterize the virtual resources used in providing the distributed service in the IaaS and that organizes the virtual resources into at least one of a tenant specified group and a tenant specified cluster, wherein: the tenant specified group is a set of disparate resources defined to be a single unit and that are organized according to an organization specified by the IaaS tenant; and the tenant specified cluster is a set of resources that perform a same function with similar workloads in an IaaS tenant application; automatically infer, based at least in part on the metadata and without human operator modeling input and information regarding actual physical network connectivity between resources, a service architecture having roles and relationships among resources, wherein the service architecture includes at least one of an inferred group based on the tenant specified group, an inferred cluster based on the tenant specified cluster, and an inferred hierarchy; and select and execute analytics on the virtual resources based at least in part on the inferred service architecture, wherein the analytics include at least one of group analytics based on the inferred group, and cluster analytics based on the inferred cluster.