AWS Security Hub now provides an SBOM inventory for your compute resources

AWS Security Hub now includes a Software Bill of Materials (SBOM) inventory, enabling central security teams to monitor software packages and applications installed on compute resources across their organization. The inventory is automatically generated from SBOMs produced by Amazon Inspector for Amazon EC2 instances, Amazon ECR container images, and AWS Lambda functions, requiring no additional setup. The SBOM page displays each package with its version, type, and the number of resources where it is installed, allowing teams to filter and group the data by attributes, account, or region. This feature streamlines security assessments by providing a centralized view of software assets.

On the resource detail page, the Installed software tab lists every package present on a specific resource, helping teams evaluate its function and criticality during incident response or triage. Security teams can use this information to prioritize vulnerabilities and assess potential risks associated with installed software. The feature also supports querying the inventory through the Security Hub API, enabling automated workflows and integration with existing security tools. This capability enhances visibility into software dependencies and potential attack surfaces.

The SBOM inventory is included with Security Hub Essentials at no additional cost, making it accessible to all users of the service. No new enablement steps are required, and the inventory populates automatically in regions where Amazon Inspector is enabled. This integration ensures that security teams can immediately benefit from the feature without additional configuration or expenses. The availability spans all AWS Regions where Security Hub is offered.

To learn more about the SBOM inventory feature, users can refer to the AWS Security Hub User Guide and the AWS Security Hub product page for detailed documentation and guidance. These resources provide instructions on how to navigate the SBOM page, interpret the data, and leverage the API for querying the inventory. The documentation also includes best practices for integrating the feature into existing security workflows and processes.