AWS Security Hub: AI & Multicloud Threat Protection

AWS has re-tooled its Security Hub to address AI and multi-cloud threats. The platform now includes AI workload protection and Microsoft Azure security monitoring. Support for other cloud platforms is also planned. Security Hub discovers Azure virtual machines, container images, and identities. It then evaluates them for misconfigurations and vulnerabilities. These Azure findings use the same format and workflows as AWS findings. This allows security teams to assess risk across their entire environment from one interface. AWS also introduced new GuardDuty capabilities for AI threat detection. This includes an AI inventory in Security Hub. Amazon GuardDuty AI Protection detects unusual model usage and cost harvesting attacks. These attacks use stolen credentials to run AI inference at a victim's expense. GuardDuty analyzes activity to identify unusual patterns that may indicate a compromise. These updates aim to help organizations better understand, connect, and act on security findings at the speed of modern attacks.