AWS Security Hub adds impact analysis for exposure findings

AWS Security Hub adds impact analysis to exposure findings, helping security teams understand the full scope of what an attacker could reach if an exposure is exploited.

• Maps downstream resources that could be compromised beyond the initially exposed resource
• Analyzes effective permissions of IAM principals to identify privilege escalation paths
• Displays potential attack path graph with prioritized chains of resources
• New Impact Assessment tab shows specific permissions at each step of attack chain
• Adjusts severity scoring based on scope of impact and downstream reach

Impact analysis provides deeper visibility into organizational risk by revealing the full extent of potential compromise from a single exposure.