AWS extends Security Hub network probing to GovCloud

AWS has extended Security Hub Network Scanning to AWS GovCloud (US), giving customers active checks of which resources are reachable from the internet. The feature probes public IP addresses, virtual machines and load balancers, identifies reachable ports and determines the services running behind them. Each reachable port produces a finding with evidence of the port and service. Security Hub Exposures combines those findings with other findings and resource configurations to assess broader risk. Existing customers can enable scanning by account and region or through an organization policy. It is on by default for new Security Hub customers and included with Security Hub Essentials at no additional cost.