AWS Security Hub Now Provides an SBOM Inventory for Your Compute Resources
AWS, Friday, November 6th, 2026
AWS Security Hub now offers an organization-wide SBOM inventory of software packages on EC2, ECR images and Lambda functions.
AWS Security Hub now provides a Software Bill of Materials inventory, giving central security teams a continuously updated, organization-wide view of software installed on compute resources.
It is built automatically from SBOMs that Amazon Inspector generates for EC2 instances, ECR container images and Lambda functions.
The SBOM page lists each package with version, type and number of resources, filterable by account and Region, and an Installed software tab on each resource aids triage.
The inventory is queryable through the API and included in Security Hub Essentials at no extra cost wherever Inspector is enabled.