AWS Security Hub Extended adds Supply Chain Security as its tenth category

New Supply Chain Security Category

AWS Security Hub Extended has expanded its offerings by introducing Supply Chain Security as its tenth category. This new addition integrates specialized security solutions directly into the Security Hub platform, aiming to simplify the management of software supply chain risks for AWS users.

Addressing Critical Security Concerns

The inclusion of Supply Chain Security responds to increasing customer demand and the growing criticality of software supply chain vulnerabilities, highlighted by incidents such as SolarWinds, Log4j, and the xz utils backdoor. These events demonstrated the potential for significant impact from compromised build systems, transitive dependencies, and long-term maintainer attacks.

Partner Integrations and Procurement Options

Initial partners for the Supply Chain Security category include Chainguard and Socket. These integrations follow the existing Security Hub Extended model, offering pay-as-you-go pricing, a single consolidated bill, and no long-term commitment requirements. For enterprises with specific procurement needs, Security Hub Extended Private Offers are available, providing committed term agreements with discounts and aggregated spending across partners on a single AWS bill.

Growth of Security Hub Extended

Since February, AWS Security Hub Extended has grown from 14 partners across 9 categories to 23 partners across 10 categories. This expansion reflects an investment from partners in engineering and go-to-market strategies, driven by customer interest in integrated security solutions.