AWS Security Hub Extended Integrates Chainguard Libraries to Fortify Software Supply Chain Defenses

AWS has announced the integration of Chainguard Libraries into its Security Hub Extended service, creating a new 'Supply Chain' category designed to combat the pervasive threat of software supply chain attacks. This partnership allows AWS customers to access a curated catalog of secure, malware-free open-source dependencies, including Python, Java, and JavaScript packages, directly through their existing AWS Security Hub console. The core offering replaces reliance on public registries like npm, PyPI, and Maven Central with packages rebuilt from verified source code within Chainguard's isolated, SLSA Level 3 certified build environment, the Chainguard Factory. This development is highly significant for any organization leveraging open-source components in their AWS environments, which is virtually all of them. The increasing sophistication and frequency of software supply chain attacks, often targeting widely used open-source packages, pose a severe risk to application integrity and operational security. Traditional security tools, primarily focused on reactive scanning, often fall short because malicious packages can spread globally within hours, causing damage before detection. By providing pre-vetted, secure-by-default alternatives, AWS and Chainguard empower developers to proactively prevent these threats from entering their CI/CD pipelines and production systems. The integration fits squarely within the broader trend of cloud providers and security vendors collaborating to offer more comprehensive, platform-native security solutions. As cloud adoption accelerates and development cycles shorten, the shared responsibility model increasingly necessitates robust tooling and partnerships that extend security controls across the entire software development lifecycle. AWS Security Hub Extended, which launched in May 2026, is a testament to this trend, aiming to simplify the procurement, deployment, and integration of best-of-breed partner security solutions into a unified security operations experience. This move also reflects the industry's growing recognition that software supply chain security is a 'first-class security problem' requiring dedicated categories and solutions, moving beyond generic vulnerability management. In practice, this means practitioners can now streamline their adoption of secure open-source components. AWS customers can subscribe to Chainguard Libraries directly via the Security Hub console, benefiting from pay-as-you-go pricing, consolidated billing, and automatic Enterprise Discount Program (EDP) eligibility. Security findings from Chainguard Libraries are normalized to the Open Cybersecurity Schema Framework (OCSF) and integrated alongside other AWS and partner security findings within Security Hub, providing a centralized view of security posture. Enterprise Support customers also receive unified Level 1 support from AWS. This integration reduces procurement complexity, enhances visibility, and allows teams to shift from a reactive posture of patching vulnerabilities to a proactive strategy of preventing them from entering the environment in the first place, ultimately accelerating secure innovation on AWS.