AWS fleshes out Security Hub with AI workload protection, Microsoft Azure support

2026-07-15 · Source: Constellation Research · Field: Technology & Digital — Artificial Intelligence & Machine Learning, Cybersecurity & Data Privacy, Cloud Computing & IT Infrastructure · Depth: Intermediate, quick

Summary

Amazon Web Services has enhanced its Security Hub and GuardDuty offerings, introducing multi-cloud security management for Microsoft Azure and new tools for AI workload protection. Published July 14, 2026, these updates build on AWS's strategy to unify security services, which were initially packaged at re:Inforce 2025. Security Hub now discovers and evaluates Azure Virtual Machines, container images, Function Apps, and identities for security issues, integrating these findings with AWS data. GuardDuty AI Protection is generally available, providing threat detection for Amazon Bedrock and SageMaker against model invocation anomalies and cost harvesting attacks. Additionally, GuardDuty AI-powered investigations are in preview in 10 AWS regions, analyzing findings and related activity from the last 90 days. Security Hub AI inventory is also generally available, offering a continuously updated view of AI assets and their security posture across all AWS accounts.

Key takeaway

For AI Security Engineers managing cloud environments, these AWS updates simplify multi-cloud and AI workload protection. You should integrate Security Hub with your Microsoft Azure deployments to centralize security findings. Implement GuardDuty AI Protection for Amazon Bedrock and SageMaker to detect model invocation anomalies and cost harvesting attacks. Leverage Security Hub AI inventory to maintain a continuous, unified view of all your AI assets' security posture across AWS accounts.

Key insights

AWS is expanding its security services to cover multi-cloud environments and AI-specific threats, integrating these capabilities into Security Hub and GuardDuty.

Principles

• Multi-cloud security requires unified data analysis.
• AI workloads need specialized threat detection.
• Continuous inventory improves security posture.

In practice

• Use GuardDuty AI Protection for Bedrock/SageMaker.
• Monitor Azure VMs via Security Hub.
• Catalog AI assets with Security Hub AI inventory.

Topics

• AWS Security Hub
• Amazon GuardDuty
• Multi-cloud Security
• AI Workload Protection
• Microsoft Azure
• AI Asset Inventory

Best for: CTO, VP of Engineering/Data, Director of AI/ML, AI Security Engineer, MLOps Engineer, IT Professional

Related on AIssential

• Securing AI Workloads in AWS: Why Bedrock and SageMaker Need Runtime Detection and AI-Powered Response — AI workloads in AWS are high-value targets requiring integrated security beyond posture management due to AI-speed attacks.
• AWS Launches Amazon GuardDuty Investigation Agent to Automate Threat Triage — The Amazon GuardDuty investigation agent automates security threat triage by correlating findings and logs across AWS accounts using AI.
• When security says no, cloud teams find a workaround — Security must enable cloud innovation through proactive governance, not block it, especially with agentic AI.
• Multi-stage attacks are the Final Fantasy bosses of security — Multi-stage cyberattacks are complex, challenging to detect, and influenced by AI's dual impact on security.
• Securing Amazon Bedrock AgentCore Runtime with AWS WAF — Securing Amazon Bedrock AgentCore Runtime with AWS WAF requires specific ALB integration patterns and a resource policy to enforce WAF inspection.
• Claude Enterprise Meets the Security Graph: Wiz Integrates with Anthropic's Compliance API — Integrating AI tool activity logs into existing security graphs centralizes visibility and governance.

See Counsel's argued verdicts on the open AI decisions leaders are weighing →

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by Constellation Research.