AWS fleshes out Security Hub with AI workload protection, Microsoft Azure support

Amazon Web Services outlined multi-cloud security management for Microsoft Azure as well as a set of GuardDuty tools to protect individual workloads.

The updates come as AWS builds out its security offerings, which were unified and packaged into Security Hub and GuardDuty last year at its re:Inforce 2025 conference. AWS is folding re:Inforce into re:Invent this year with a security track.

• AWS lays out multicloud plans for Security Hub
• AWS re:Inforce 2025: GenAI, AI agents and common sense security
• AWS re:Inforce 2025: How customers are using AWS security building blocks

AWS' approach is to connect security data in multiple systems for analysis across enterprises. In addition, to AWS' new additions the company has Security Hub Extended, which has 21 partners across nine categories. Enterprises can leverage these partners with a single AWS bill.

Here's a look at what AWS announced:

• Security Hub now discovers Azure Virtual Machines, container images, Function Apps and identities and evaluates them for security issues. Azure findings will be combined with AWS findings. AWS said that more clouds will follow support for Microsoft Azure.
• GuardDuty AI Protection is generally available. Amazon GuardDuty AI Protection features threat detection for Amazon Bedrock and SageMaker to catch anomalies in model invocations and cost harvesting attacks, which are where adversaries steal credentials to run inference at your expense.
• GuardDuty AI-powered investigations are in preview in 10 AWS regions. The feature automatically analyzes GuardDuty findings and the accounts around them and examines context, related activity from the last 90 days, affected resources and other indicators.
• Security Hub AI inventory is generally available. Security Hub now provides a continuously updated view of AI assets and their security posture. Security Hub AI inventory discovers and catalogs AI workloads in both managed services and self-hosted and external workloads across every AWS account in the enterprise.