2026-08-01 · aws-security
AWS Security published a new update for Amazon Inspector SBOM Generator, the standalone tool behind Amazon Inspector’s software inventory engine. The post explains how plugin support extends SBOM creation so teams can capture more complete dependency and package visibility across workloads. That is directly relevant to cold storage and recovery planning. When an incident forces a rebuild, the value of offline backups depends not just on having copies, but on having copies whose contents, provenance, and dependency chain can still be verified under pressure.
AWS introduced plugin support for Amazon Inspector SBOM Generator, allowing organizations to extend how software bills of materials are produced for workloads and container artifacts. This improves the ability to inventory components, identify vulnerable dependencies, and keep a clearer record of what exactly is running or stored.
In a breach or ransomware event, teams often discover too late that their recovery images and archived application bundles contain outdated or untracked components. That turns recovery into a gamble: even if the data survives, restored systems may bring the same compromise back online or fail audit and trust requirements when the business needs certainty most.
Cold storage is strongest when paired with verified recovery artifacts, immutable archives, and offline copies of trusted software inventories. Keeping backup sets, golden images, and associated SBOM evidence offline gives defenders a clean baseline they can restore from without relying on already-compromised live systems to tell them what is safe.
Read Original Post →