Security posture management

You can view issues created by Correlated Threats and security graph rules at the folder or project level.

On the Issues page, you can filter all issues by service type, project number, and folder ID. For more information, see Issues overview.

AWS Security Hub CSPM now supports the Cyber Risk Institute profile version 2.2

AWS Security Hub CSPM now supports automated security checks that align with the Cyber Risk Institute (CRI) profile. The CRI Profile is a cybersecurity framework developed by the Cyber Risk Institute, a non-profit coalition of financial institutions and trade associations.

To increase the precision of attack path analysis and provide attack exposure scores that help you prioritize confirmed internet exposures, Risk Engine attack…

To increase the precision of attack path analysis and provide attack exposure scores that help you prioritize confirmed internet exposures, Risk Engine attack path simulations support the EXTERNALLY_EXPOSED_VM_INSTANCE External Exposure finding category ( Preview ).

AWS Security Hub now supports resource criticality for prioritization

Today, AWS Security Hub adds resource criticality to exposure prioritization, helping central security teams focus on the exposures that threaten their most business-critical resources.

AWS Security Hub now exports findings to S3 in CSV or JSON format

Today, AWS Security Hub announces support for exporting findings to Amazon S3 in CSV or JSON (OCSF) format.

Using gcloud CLI, the securitycenter REST API, or client libraries, you can configure Pub/Sub and BigQuery continuous export to receive notifications when…

Using gcloud CLI, the securitycenter REST API, or client libraries, you can configure Pub/Sub and BigQuery continuous export to receive notifications when findings are deleted from Security Command Center due to data retention policies.

Artifact guard with CI/CD integration is deprecated.

It will be shut down on October 30, 2026.

GuardDuty Runtime Monitoring is now included in the AWS Security Hub Threat Analytics plan

Today, AWS announces that Amazon GuardDuty Runtime Monitoring is now included in the AWS Security Hub Threat Analytics plan.

AWS Security Hub introduces remediation plans to prioritize and fix security exposures

AWS Security Hub now offers remediation plans that group related exposure findings sharing a root cause.

Event Threat Detection integrates with Sensitive Data Protection to enrich findings that affect sensitive resources.

For more information, see Sensitive data enrichment.

Risk Engine detects and reports reasoning engines that can modify IAM policies and perform lateral movement.

These findings are generated as a toxic combination.

The following Security Command Center finding category names from AI Protection have new names to clarify that AI Protection detects tuned models and to remove…

The following Security Command Center finding category names from AI Protection have new names to clarify that AI Protection detects tuned models and to remove the legacy VERTEX_1P_ prefix:

AWS Security Hub AI Inventory adds Azure self-hosted instance support

AWS Security Hub AI Inventory now supports discovering and cataloging AI assets running on self-hosted instances in Microsoft Azure.

You can use the following MCP server endpoints to enable LLM agents to perform investigative and management tasks in Security Command Center.

Security Command Center

Data Security Posture Management is deprecated.

It will be shut down on February 1, 2027. Learn more about the controls and alternative detection capabilities.

AWS Security Hub Extended adds supply chain security as its 10th category

The AWS Security Hub Extended plan now includes Supply Chain Security as its 10th security category, with Chainguard and Socket as the curated partners.

AWS Security Hub MCP App brings exposure findings into your AI-assisted workflow (Preview)

AWS announces the preview of the AWS Security Hub MCP App, a local Model Context Protocol (MCP) server that brings your Security Hub exposure findings directly into Claude Desktop.

AWS Security Hub now provides AI inventory for organization-wide visibility of AI assets

Today, AWS announces that AWS Security Hub now provides an AI inventory, giving central security teams a continuously updated, organization-wide view of AI assets and their security posture.

AWS Security Hub now offers Network Scanning to identify publicly reachable resources

Today, AWS Security Hub introduces Network Scanning, a capability that identifies resources in your environment that are reachable from the public internet.

AWS Security Hub extends unified security management to Microsoft Azure

Today, AWS announces that AWS Security Hub now monitors Microsoft Azure resources, extending risk analytics, cloud security posture management, vulnerability management, and security response management across both clouds.