AWS Security Hub adds an organization-wide SBOM inventory

Before this launch, SBOM data lived per resource in Inspector. Aggregating it in Security Hub lets security teams answer "where is this vulnerable package running?" across all accounts at once.

That matters more as AI-driven vulnerability discovery accelerates. HN's top thread this week argued AI is forcing the industry to pay off 40 years of technical debt. Faster bug discovery means faster patch-scoping, and an inventory is a prerequisite for both.

Watch for remediation automation built on top of the inventory.