AWS First Steps
LanguageEnglish
New feature

AWS Security Hub AI Inventory adds Azure self-hosted instance support

AWS Security Hub AI Inventory now supports discovering and cataloging AI assets running on self-hosted instances in Microsoft Azure, allowing security teams to centrally manage AI assets and their security posture across AWS and Azure environments.

AWS Security Hub AI Inventory supports discovering and cataloging AI assets running on self-hosted instances in Microsoft Azure, extending existing self-hosted detection beyond AWS. This gives security teams a continuously updated view of organization-wide AI assets and security posture across multi-cloud environments. Each detected AI asset is mapped to its underlying infrastructure and correlated with security findings, allowing teams to filter, group, and query the AI inventory in both AWS and Azure. The feature is included with Security Hub Essentials at no additional cost and is available in all AWS commercial regions where Security Hub is offered.

Why it matters

This update benefits security teams that need to manage AI assets across multi-cloud environments. By supporting Azure self-hosted instances, AWS Security Hub enables centralized monitoring of organizational AI resources.

Read the original AWS announcement

Related articles and terms

Security Posture Management - Building a Unified Security Monitoring Foundation with AWS Security HubLearn about unified security monitoring with AWS Security Hub and automated threat detection through GuardDuty integration. This guide covers visualizing compliance with security best practices and security governance for multi-account environments.AWS Security HubCentrally manage your AWS security posture and automatically check compliance with best practicesCentralized Security Posture Management with AWS Security Hub - Aggregating Findings and Automated ResponseAggregate findings from GuardDuty, Inspector, and Macie using ASFF, quantify your security score through automated security standard evaluations, and set up automated remediation via EventBridge.AWS Security Service Integration - Native Threat Detection from GuardDuty to Detective Without a SIEMWe explain the native threat detection mechanism through the integration of GuardDuty, Security Hub, Detective, and Macie, and compare the design philosophy differences with Azure Sentinel.Amazon DataZoneA data management portal that integrates data cataloging, access governance, and self-service data sharing