AWS Security Hub adds AI inventory for organization-wide asset visibility
AWS Security Hub now offers an AI inventory to provide central security teams with an organization-wide view of AI assets and their security posture. This feature addresses the growing challenge of visibility into rapidly deployed AI workloads across AWS environments. It automatically discovers and catalogs AI assets using various AWS services and includes security findings for prioritization, available at no additional cost.
- →AI inventory provides centralized visibility into AI assets
- →Automated discovery of AI workloads
- →Discovery of external AI API endpoints
- →Correlation of AI assets with security findings
- →AI Inventory included with Security Hub Essentials at no extra cost
Features (3) ›
- AI inventory provides centralized visibility into AI assets
AWS Security Hub introduces an AI inventory that offers continuously updated, organization-wide visibility into AI assets and their security posture. This helps security teams manage the risks associated with AI deployments.
- Automated discovery of AI workloads
The feature automatically discovers and catalogs AI workloads through multiple methods, including managed services like Amazon Bedrock and Amazon SageMaker, and enhanced SBOM analysis from Amazon Inspector for self-hosted workloads on EC2 instances and ECR images.
- Discovery of external AI API endpoints
Security Hub leverages Amazon GuardDuty DNS telemetry to detect external AI API endpoints accessed from EC2 instances, revealing third-party AI dependencies that might otherwise go unnoticed.
Enhancements (1) ›
- Correlation of AI assets with security findings
Each discovered AI asset is mapped to its underlying infrastructure and correlated with security findings from across the AWS security stack, including threat findings from Amazon GuardDuty, enabling better risk prioritization.
Notes (1) ›
- AI Inventory included with Security Hub Essentials at no extra cost
AI Inventory is available at no additional cost with Security Hub Essentials and requires no new enablement. It is accessible in all AWS commercial Regions where Security Hub is offered.
https://aws.amazon.com/about-aws/whats-new/2026/07/aws-security-hub-ai/
Related releases
- AWS Elastic Disaster Recovery supports EBS volume initialization rate AWS What's New ·
- AWS Elastic Disaster Recovery speeds up AWS-to-AWS recovery AWS What's New ·
- EC2 C8id, M8id, R8id instances expand to new AWS regions AWS What's New ·
- Amazon EC2 M8gd and R8gd instances now available in AWS GovCloud AWS What's New ·
- EC2 M8gd and R8gd Instances Expand to More AWS Regions AWS What's New ·
- Amazon EC2 G7 instances with NVIDIA RTX PRO 4500 GPUs now available AWS News Blog ·