AWS Security Hub launched Network Scanning to actively probe AWS and Azure environments from the internet, identifying resources truly reachable rather than potentially reachable by configuration analysis alone. It detects public IP addresses, virtual machines, load balancers, reachable ports, and running services, providing precise security visibility.
Each scanning result generates detailed findings correlating open ports and services, enhancing risk assessment when combined with existing Security Hub exposure data. This feature supports more accurate identification of externally exposed resources to improve security posture. Claims relate to detection accuracy but third-party validations are not noted.
Source & further reading
AWS Security Hub now offers Network Scanning to identify publicly reachable resources ↗Source published 2026-07-08. This report was prepared with AI assistance from the linked primary-source material. Claims and limitations should be checked against the original announcement or research.