AWS Security Hub adds AI inventory for organization-wide asset visibility
AWS Security Hub now offers an AI inventory to provide central security teams with an organization-wide view of AI assets and their security posture. This feature addresses the growing challenge of visibility into rapidly deployed AI workloads across AWS environments. It automatically discovers and catalogs AI assets using various AWS services and includes security findings for prioritization, available at no additional cost.
- →AI inventory provides centralized visibility into AI assets
- →Automated discovery of AI workloads
- →Discovery of external AI API endpoints
- →Correlation of AI assets with security findings
- →AI Inventory included with Security Hub Essentials at no extra cost
Features (3) ›
- AI inventory provides centralized visibility into AI assets
AWS Security Hub introduces an AI inventory that offers continuously updated, organization-wide visibility into AI assets and their security posture. This helps security teams manage the risks associated with AI deployments.
- Automated discovery of AI workloads
The feature automatically discovers and catalogs AI workloads through multiple methods, including managed services like Amazon Bedrock and Amazon SageMaker, and enhanced SBOM analysis from Amazon Inspector for self-hosted workloads on EC2 instances and ECR images.
- Discovery of external AI API endpoints
Security Hub leverages Amazon GuardDuty DNS telemetry to detect external AI API endpoints accessed from EC2 instances, revealing third-party AI dependencies that might otherwise go unnoticed.
Enhancements (1) ›
- Correlation of AI assets with security findings
Each discovered AI asset is mapped to its underlying infrastructure and correlated with security findings from across the AWS security stack, including threat findings from Amazon GuardDuty, enabling better risk prioritization.
Notes (1) ›
- AI Inventory included with Security Hub Essentials at no extra cost
AI Inventory is available at no additional cost with Security Hub Essentials and requires no new enablement. It is accessible in all AWS commercial Regions where Security Hub is offered.
https://aws.amazon.com/about-aws/whats-new/2026/07/aws-security-hub-ai/
Related releases
- CloudWatch adds managed Prometheus collectors AWS What's New ·
- Amazon EC2 C7i Instances Expand to New Regions AWS What's New ·
- EC2 C7i-flex instances now available in Europe (Milan) region AWS What's New ·
- AWS CodeDeploy Expands to Five New Regions AWS What's New ·
- EC2 Auto Scaling Instance Refresh integrated with CloudFormation AWS What's New ·
- EC2 Dedicated Hosts support host resource groups without self-managed licenses AWS What's New ·