AWS Security Hub turns Inspector’s SBOMs into an org-wide software inventory

On November 6, 2026, AWS announced that Security Hub now provides an SBOM inventory, consolidating the software bills of materials that Amazon Inspector generates for EC2, ECR, and Lambda into a continuously updated, organization-wide view. For security teams, it answers the question that follows every critical CVE: where is this package installed, and on how many resources.