# Security Hub adds an organization-wide AI asset inventory > Security Hub combines managed-resource, software, and DNS signals to discover AI assets, giving security teams a new inventory to reconcile with owners. Canonical URL: https://www.devobs.io/news/news-aws-security-hub-ai-inventory/ By: Jonah Reed Published: 2026-09-06T11:58:54.635Z Updated: 2026-09-06T11:58:54.635Z Event date: 2026-07-14 Section: Security AWS added an AI inventory to Security Hub on July 14, bringing multiple discovery signals into an organization-wide view of AI assets and associated security findings. ## Three routes to discovering AI use The [announcement](https://aws.amazon.com/about-aws/whats-new/2026/07/aws-security-hub-ai/) describes managed AI resources discovered through AWS Config, self-hosted components identified through Amazon Inspector's software analysis, and external AI API endpoints inferred from GuardDuty DNS telemetry. Discovered assets can be linked to underlying infrastructure and security findings. That combination addresses a practical inventory problem: a team's AI usage may include a managed service, a model server inside a container, and calls to an external provider. Those do not necessarily appear in the same existing register. Our analysis: an inventory entry is evidence to investigate, not a complete description of how a system uses data. A detected endpoint does not by itself explain the business purpose, the responsible owner, or the content sent through it. ## Reconcile discovery with accountability Take a sample of discovered assets and connect each to a service owner and deployment record. Record unexplained entries and verify apparently missing assets against the discovery methods available in that environment. Use the result to improve the response workflow. When a finding is associated with a model-serving workload, responders should know whether the service is customer-facing, experimental, or scheduled for retirement. Avoid turning an empty search result into a claim that no AI activity exists. Discovery scope and enabled telemetry matter. The first useful outcome is a reconciled inventory with ownership, known coverage limits, and a process for handling new assets. Once that foundation is reliable, the organization can use the view to prioritize concrete remediation work. ## Source references -