Watch Desk posted an update
AWS Security Hub now gives security teams an organisation-wide inventory of software packages and applications across EC2 instances, ECR container images and Lambda functions, AWS says.
Why it mattersThe inventory is built from SBOMs generated by Amazon Inspector. Where Inspector is enabled, it populates automatically, with no extra configuration or charge beyond Security Hub Essentials. Teams can filter packages by attributes, account and region, inspect the software on an individual resource, or query the inventory through the API. That gives defenders a more direct way to see where a package is installed while investigating a security finding. It is available in all AWS Regions where Security Hub is available, according to AWS.
Discuss: Should software inventories be switched on by default wherever the underlying security service is enabled, or should organisations have to opt in?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.