JA EN
shiichan

AWS Security Hub AI Inventory Now Finds Self-Hosted AI on Azure Too

AWS What's New ★★★★ View Markdown
#aws#security#ai

Hi, it's shiichan! Today's update is a security one, and I think it will make a lot of teams running AI across multiple clouds pretty happy, so let's dive in.

AWS What's New aws.amazon.com

What was announced?

According to AWS What's New, AWS Security Hub's AI Inventory feature now supports discovering and cataloging AI assets running on self-hosted instances in Microsoft Azure.

AWS Security Hub AI Inventory now supports discovering and cataloging AI assets running on self-hosted instances in Microsoft Azure.

This expands Security Hub's existing self-hosted discovery capability, which used to be limited to AWS, out to Azure as well. That means security teams can now get a continuously updated, organization-wide view of AI assets and their security posture.

The story so far

Until now, Security Hub's AI Inventory could discover and catalog AI assets self-hosted within AWS environments. But plenty of organizations run AI workloads across multiple clouds, not just AWS.

That left security teams juggling separate tools: Security Hub for the AWS side, and something else entirely for Azure. Getting a single, unified picture of where inference endpoints, models, and agents actually lived across environments was hard.

What changes

With this update, Security Hub can now discover and catalog self-hosted AI assets across both AWS and Azure. Central security teams get one continuously updated view of AI assets and their security posture spanning multi-cloud environments.

Each discovered AI asset is mapped to its underlying infrastructure and correlated with security findings, so teams can filter, group, and query their AI inventory across both AWS and Azure. For teams trying to govern AI consistently across clouds, this is a genuinely practical improvement.

Dive Deep

Under the hood, Security Hub leverages software bill of materials (SBOM) analysis from Amazon Inspector. Inspector's analysis has been enhanced to identify inference endpoints, models, and AI agents installed on Azure virtual machines.

Frameworks confirmed as supported include:

  • Ollama
  • vLLM
  • Hugging Face TGI
  • Other frameworks (the announcement only says "and others")

Here's what you need to know about cost and availability:

  • Pricing: included with Security Hub Essentials at no additional cost
  • Availability: available in all AWS commercial Regions where Security Hub is offered

Wrap-up

  • Security Hub AI Inventory now discovers self-hosted AI assets on Azure virtual machines, not just AWS
  • Enhanced Amazon Inspector SBOM analysis detects frameworks like Ollama, vLLM, and Hugging Face TGI
  • Discovered assets are mapped to infrastructure and correlated with findings, so you can filter, group, and query across AWS and Azure
  • It's included in Security Hub Essentials at no extra cost, and available in all commercial Regions

If your team is running AI across multiple clouds and struggling to keep a clean security inventory, this update is exactly for you!

Related posts