AWS Security Hub now provides AI inventory for organization-wide visibility of AI assets

AWS Security Hub now provides AI inventory, giving central security teams organization-wide visibility of AI assets and their security posture.

• Automatically discovers and catalogs AI workloads across AWS environments through three discovery methods
• Inventories managed AI services from Amazon Bedrock, Bedrock AgentCore, and Amazon SageMaker with no additional configuration
• Uses SBOM analysis from Amazon Inspector to identify self-hosted AI workloads on EC2 and ECR, including Ollama and Hugging Face TGI
• Leverages GuardDuty DNS telemetry to discover external AI API endpoints and third-party model provider dependencies
• Maps AI assets to infrastructure and correlates with security findings from GuardDuty and AWS security stack
• Enables filtering, grouping, and querying by account, resource type, discovery method, and model identity
• Included with Security Hub Essentials at no additional cost in all AWS commercial regions

Security teams can now gain centralized visibility into AI assets and prioritize remediation based on active threats and organizational risk.