Concise summaries of official AWS update announcements for AWS Security Hub.
Read the AWS Security Hub guide / Back to the latest updates
Information as of November 3, 2026.
AWS Security Hub adds resource criticality to exposure prioritization, helping security teams focus on exposures threatening their most business-critical resources. Included with Security Hub Essentials at no extra cost and always on for all customers.
AWS Security Hub now supports exporting findings to Amazon S3 in CSV or JSON (OCSF) format, enabling compliance reporting and audit evidence without custom pipelines.
Amazon GuardDuty Runtime Monitoring is now bundled with AWS Security Hub Threat Analytics plan, providing threat detection for Amazon EC2, Amazon EKS, and Amazon ECS on AWS Fargate through a single streamlined pricing model.
AWS Security Hub now groups related exposure findings by root cause, allowing you to fix a single underlying resource to resolve or reduce multiple exposures at once, with prioritized guidance and multi-format instructions.
AWS Security Hub AI Inventory now supports discovering and cataloging AI assets running on self-hosted instances in Microsoft Azure, allowing security teams to centrally manage AI assets and their security posture across AWS and Azure environments.
AWS Security Hub Extended now includes supply chain security as its 10th category with Chainguard and Socket as curated partners, enabling detection and blocking of malicious dependencies before they are built into applications.
AWS Security Hub MCP App, a local MCP server, integrates Security Hub exposure findings into Claude Desktop to accelerate security investigations
AWS Security Hub now offers an AI inventory, giving security teams a continuous, organization-wide view of AI assets and their security posture. It automatically discovers managed AI services and self-hosted workloads across AWS environments.
AWS Security Hub introduces Network Scanning to identify resources actually reachable from the public internet, detecting public IPs, VMs, load balancers, open ports, and services behind them.
AWS Security Hub introduces impact analysis for exposure findings, helping security teams understand the full scope of potential attacker access
AWS Security Hub CSPM introduces an AI Security Best Practices standard with 31 automated controls to evaluate Amazon Bedrock and SageMaker workloads against security configurations
AWS Security Hub now monitors Microsoft Azure resources, unifying risk analytics and security posture management across both clouds. It automatically detects Azure VMs, container images, and more.
No updates match the selected filters. Try changing them.