AWS discovery using patterns

Discovery and Service Mapping Patterns uses patterns to discover components of the Amazon AWS Cloud deployment during horizontal discovery. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Request apps on the Store

Visit the ServiceNow Store to view all the available apps, and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.

Prerequisites

• Verify that the applications are up to date:

  • Discovery and Service Mapping Patterns

  • CMDB CI Class Models

  • Visibility Content

  • Discovery and Service Mapping Patterns

  • CMDB CI Class Models

  • Visibility Content

• Update the method used for pointed discovery for the AWS CloudFormation Template (CFT) stack

  If you use Cloud Provisioning and Governance, you must update the getOperationGR(type) method. This update enables the pointed discovery to list the resources correctly for the AWS CFT stack after provisioning. For further information about the steps required to update this method, see the Knowledge Base article KB0858437.

• Activate the cloud-related CI relationships

  To include discovered components into service instances, enable CI relationships used in tag-based discovery by Service Mapping. These CI relationships are available from the 1.0.68 release on the ServiceNow Store. For operational steps, see Tag-based discovery configuration.

• Set up service accounts on the AWS Management Console

  An AWS Organization is a collection of AWS accounts under a single account. In AWS Organizations, parent accounts are called management accounts. The sub-accounts that belong to a management account are called member accounts.

  Note: Cloud Discovery for AWS Organizations isn’t fully supported in a GovCloud isolated region.

  The advantages of using management accounts in Discovery are:

  • Easy population of member accounts

    After you configure the management account and supply the necessary credentials, you can test the connection to the account. If the test succeeds, Discovery returns a list of the member accounts in that management account. From this list, you can choose one or more member account to include in the Discovery of the management account.

  • (Optional) Discover member resources using dynamically acquired credentials

    When you run Discovery on your cloud resources, you don’t need separate credentials for each member account. The Cloud Discovery process handles credentials automatically by acquiring a temporary credential for each member via an AWS API. You can elect to use the default configuration or customize the MID Server to assume other roles for additional controls and security.

  For more information, see Setup AWS service accounts.

• Use IAM user policy on the AWS Management Console

  To use the IAM user policy instead of credentials during discovery, configure the MID Server for AWS IAM roles. For more information, see configure the MID Server for AWS IAM roles.

  To create the IAM user policy for provisioning AWS resources, see Control AWS access and permissions using policies.

• Configure access to the AWS resources

  To discover a single account, create an IAM account in the AWS Management Console, and verify that it has the "ReadOnlyAccess" policy applied. To discover several member or child accounts, configure the credentials as described in Access setup for AWS service accounts.

• Configure a discovery schedule

  {Create an AWS Discovery schedule in Discovery Admin Workspace}[].

• (Optional) Discover datacenters only for new members

  Starting with Zurich Patch 2, you can discover datacenters only for new members added since the last discovery. For more information, see Discover datacenters only for new cloud accounts.

• Optimize discovery by including only datacenters with resources

  You can optimize discovery by limiting it to only AWS datacenters with resources.

  • Verify that your service account has the following IAM permissions to access the Resource Explorer API (starting with Discovery and Service Mapping Patterns version 1.35.0).

    IAM permission Coverage resource-explorer-2:Search Partial resource-explorer-2:Search + iam:CreateServiceLinkedRole Full

    For more information, go to the AWS Documentation and search for the "Getting started with Resource Explorer" article.

  • Discover only datacenters with resources by setting the mid.cloud.discovery.sonar.discover_all_aws_datacenters MID Server property to false. For more information, see Limit AWS discovery to datacenters with resources.

  • To exclude specific resource types from AWS datacenter discovery, configure the sn_itom_pattern.discovery.aws.ldc.excluded_resource_types system property with a comma-separated list of resource types to exclude (starting with Discovery and Service Mapping Patterns version 1.35.0). For more information, see Exclude AWS resource types from datacenter discovery. Note: Discovery and Service Mapping Patterns versions 1.29.0 through 1.32.0 used the AWS Config service instead of the Resource Explorer API to determine datacenter activity. For instructions on configuring AWS Config recorder, go to the AWS Documentation and search for the "Recording resources in the AWS Config console" article.

  For more information, see the AWS resources discovery by datacenters section.

• (Optional) Populate Service Account and Logical Datacenter fields in cloud CIs

  Starting with Discovery and Service Mapping Patterns version 1.30.2, you can improve query performance by populating Service Account and Logical Datacenter fields directly in cloud CIs. For more information, see Improved query performance with direct field population in CI tables.

Verify the REST API permissions

Download the Cloud Discovery patterns spreadsheet so you can grant user permissions required for running the Discovery patterns. In addition to permissions, the spreadsheet also includes useful information such as pattern names, types, CI Classes, and links to vendor documentation. New patterns are available quarterly, so check periodically to be sure you have the latest version of the spreadsheet.

Note: You can test the AWS REST APIs using Postman API platform. For more information, see the How to test AWS REST API using POSTMAN [KB0782183] article in the Now Support Knowledge Base.

Support for AWS services in the China region

The latest version of Discovery and Service Mapping Patterns supports discovering AWS services in the China region. You can discover these services on the ServiceNow AI Platform, starting from Xanadu Patch 3 and Washington DC Patch 9 instances.

Discovering AWS services in the China region requires using a datacenter URL when setting up an AWS service account. For example: https://organizations.cn-northwest-1.amazonaws.com.cn.

• To learn more about AWS master account and sub-account support in the China region, see KB1704526.

• To identify AWS patterns supported in the China region, refer to the Cloud Discovery patterns spreadsheet. The AWS China Region Support column has a Yes value for supported patterns.

AWS resources discovery by datacenters

Starting with version 1.29.0, Discovery and Service Mapping Patterns introduces a new AWS datacenter discovery model. The previous model discovered all datacenters, regardless of whether they contained relevant resources. The new model improves the AWS discovery performance by focusing only on datacenters that contain resources.

AWS has multiple datacenters around the world, but resources like load balancers and virtual machines are typically deployed in only some of them. The Amazon AWS Datacenter Discovery pattern runs before all other AWS patterns to identify datacenters with resources related to your service account (“active”) and those without (“passive”). A datacenter is classified as “empty” when the Resource Explorer API is unavailable or lacks permissions, and patterns continue to run as normal. You can check the discovery log for the exact cause — for more information, see Logs for horizontal discovery.

After identifying “active”, “passive”, or “empty” datacenters, the discovery schedule continues to execute all AWS patterns only for “active” or “empty” datacenters, to discover your AWS cloud resources. “Passive” datacenters are ignored during the schedule. The Refresh Datacenters flow continues to display all regions, not just active ones. You don’t need to create another schedule when a resource is added or a datacenter switches from passive to active.

The mid.cloud.discovery.sonar.discover_all_aws_datacenters MID Server property is set to true by default, which discovers all datacenters. To limit discovery to the “active” or “empty” datacenters, set this property to false. Starting with Discovery and Service Mapping Patterns version 1.35.0, you can exclude specific resource types from AWS datacenter discovery to avoid marking regions with only default or unneeded resources as active. For information on setting up active datacenter discovery, see the Optimize discovery by including only datacenters with resources prerequisite.

Datacenters discovered before upgrading to version 1.29.0 remain in the Amazon AWS Datacenters table. Depending on the service account and MID Server property settings, you might notice differences in discovery time and CMDB data.

MID Server property setting Flow Discovered/displayed datacenters False New schedule All datacenters except passive False Refresh Datacenters All datacenters True (default) New schedule All datacenters True (default) Refresh Datacenters All datacenters

[Omitted image “aws-datacenter-model-flow.png”] Alt text: Comparing MID Server property settings and discovered datacenters in schedule and refresh datacenter flows

Note: Discovery and Service Mapping Patterns versions 1.29.0 through 1.32.0 used the AWS Config service instead of the Resource Explorer API to determine datacenter activity. For instructions on configuring AWS Config recorder, go to the AWS Documentation and search for the “Recording resources in the AWS Config console” article.

AWS discovery Dependency Views

[Omitted image “aws-cloud-load-balancer-components.png”] Alt text: Dependency Views displaying the cloud load balancer and connected components.

[Omitted image “aws-cloud-network-components.png”] Alt text: Dependency Views displaying components connected to the cloud network in the AWS environment.

[Omitted image “aws-virtual-machine-components.png”] Alt text: Dependency Views showing Virtual Machine and connected components in the AWS environment.

Services discovered by patterns

Horizontal discovery finds EC2 and VPC services running on AWS resources.

Service name CI class Pattern AWS::EC2::SecurityGroup Compute Security Group [cmdb_ci_compute_security_group] Amazon AWS Security Group Events AWS::EC2::Subnet Cloud Subnet [cmdb_ci_cloud_subnet] Amazon AWS Subnet Events AWS::EC2::VPC Cloud Network [cmdb_ci_network] Amazon AWS Network Events AWS::EC2::Instance Virtual Machine Instance [cmdb_ci_vm_instance] Amazon AWS Virtual Server Events EQS::EC2::Volume Storage Volume [cmdb_ci_storage_volume] Amazon AWS Elastic Block Storage AWS::ElasticLoadBalancingV2::LoadBalancer Cloud Load Balancer [cmdb_ci_cloud_load_balancer] Amazon AWS Application and Network LBs Events AWS::ElasticLoadBalancing::LoadBalancer Cloud Load Balancer [cmdb_ci_cloud_load_balancer] Amazon AWS Classic LBs Events

Data collected by Service Mapping during tag-based discovery

Service Mapping uses tag-based discovery to create service instance maps including the Cloud components. The Service Mapping application comes with the following preconfigured CI relationships used for tag-based discovery. These CI relationships are available from the 1.0.68 release on the ServiceNow Store.

CI Relationship CI Configuration Item [cmdb_ci] Hosted on::Hosts Logical Datacenter [cmdb_ci_logical_datacenter] Logical Datacenter [cmdb_ci_logical_datacenter] Hosted on::Hosts Cloud Service Account [cmdb_ci_cloud_service_account]

• Amazon API Gateway discovery with Patterns
  The ServiceNow Discovery and Service Mapping applications use the Amazon AWS API Gateway pattern to find Amazon API Gateways and connections to other entities. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon API Gateway Domain Name pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon Athena Workgroup pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon Athena Workgroups on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon CloudFront Distribution pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon CloudFront Distributions on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon CloudWatch Log Group pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon CloudWatch Log Groups on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon DynamoDB Cluster pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon EC2 Amazon EBS Snapshot pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon EC2 Reserved Instance pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon EC2 VPC Endpoint Service pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon EC2 VPC Peering Connection pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon Elastic File System (Amazon EFS) pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon ElastiCache Snapshot pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon EMR Cluster pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon EMR Clusters on your cloud environment running on EC2. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon EventBridge Event Bus pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon EventBridge Event Buses on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon FSx Backup pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon FSx Backups on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon FSx File System pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon FSx File Systems on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon MQ Broker pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon MQ Brokers on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon MQ Configuration pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon MQ Configurations on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon MWAA Environment pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon RDS DB Snapshot pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon Redshift Serverless Namespace pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon Redshift Serverless Snapshot pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon Redshift Serverless Workgroup pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon Route 53 pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon Route 53 domain name systems (DNS) and aliases on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon S3 Glacier Vault pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon S3 Glacier Vaults on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon SageMaker Notebook Instance pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon SageMaker Notebook Instances on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon SageMaker Training Job pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon Simple Email Service Identity pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon Simple Email Service (SES) Identities on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon SQS Queue pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon SQS Queues on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon Timestream for InfluxDB Database Instance pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon VPC Flow Log pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon Virtual Private Cloud (Amazon VPC) Flow Logs on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Amazon Amazon VPC Managed Prefix List pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon Virtual Private Cloud (Amazon VPC) Managed Prefix Lists on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Application and Network LB pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Application Load Balancers and Network Load Balancers on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS AppSync API pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS AppSync APIs on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Availability Zone pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Availability Zones in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Backup Plan pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Backup Plans on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Backup Vault pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Backup Vaults on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Batch Compute Environment pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Classic Load Balancer pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Classic Load Balancers on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS CloudHSM HSM pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS CloudTrail Trail pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS CodeDeploy Deployment pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS CodeDeploy Deployments on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS CodePipeline Pipeline pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS CodePipeline Pipelines on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Customer Gateway pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS customer gateways on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS datacenter pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Regions for your AWS account on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS DataSync Task pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS discover Organization pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Cloud Organizations in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS DMS Endpoints pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS DMS endpoints on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Elastic Beanstalk Application pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Elastic Beanstalk Applications on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Events pattern-based discovery
  Discovery uses event patterns to update Amazon AWS Cloud component data in near real-time. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Global Accelerator pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Glue Database pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Glue Databases on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS hardware type pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon EC2 instance types on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Host pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Dedicated Hosts in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS IAM Policy pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS IAM Policies on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS IAM Role pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS IAM Roles on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS IAM User pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS IAM Users on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Internet Gateway pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Internet Gateways in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS IP Address pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS IP addresses associated with network interfaces in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Key Pair pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS key pairs in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS KMS Key pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS KMS Keys on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS LB Pool pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS load balancer (LB) pools (known in AWS as target groups) in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS LB Pool Member pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Application Load Balancer (LB) pool members (known in AWS as target group members) in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS LB Service pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS load balancer (LB) listeners in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Linux Server pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Linux Server configuration items (CIs) in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Marketplace pattern-based discovery
  Discovery and Service Mapping Patterns finds active AWS Marketplace subscriptions on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS NAT Gateway pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Network Address Translation (NAT) Gateways in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Network pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Virtual Private Cloud (VPC) networks in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Network ACL pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Network access control lists (ACLs) on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Network Firewall pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS NIC pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS network interfaces (NICs) in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Organizations pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Organizations accounts on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Organizational Units pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Organizational Units in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS OS image pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS OS images (both owned and executable) on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Public IP Address pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS public IP addresses (Elastic IPs) in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Route Table pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS route tables in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Secrets Manager Secret pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Secrets Manager Secrets on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Security Group pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS security groups in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Serverless Database pattern-based discovery
  Discovery and Service Mapping Patterns finds Amazon Aurora Serverless databases on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS SSM Cloud Agents pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Systems Manager (SSM) agents on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Step Functions State Machine pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Step Functions State Machines on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Storage pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Elastic Block Store (EBS) storage volumes on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Storage Gateway File Share pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS services on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Storage Gateway Gateway pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Storage Gateway Gateways on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS sub account Organizations pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS sub-accounts in your organization on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS sub account regional pattern-based discovery
  Discovery and Service Mapping Patterns finds member accounts and the primary account within an AWS Organization. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS subnet pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS subnets on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Systems Manager Document pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Systems Manager Documents on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Systems Manager Parameter Store pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Systems Manager Parameter Store parameters on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Transfer Family Server pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Transfer Family Servers on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS virtual server pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS EC2 virtual machine instances on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS VPN Connections pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Virtual Private Network (VPN) connections on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS VPN Gateway pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS virtual private gateways on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS web ACL pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS web access control lists (web ACLs) on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS Windows Server pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS Windows Server configuration items (CIs) in your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• AWS X-Ray Sampling Rule pattern-based discovery
  Discovery and Service Mapping Patterns finds AWS X-Ray Sampling Rules on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

• Limit AWS discovery to datacenters with resources
  Optimize AWS discovery by limiting it to datacenters with resources.

• Exclude AWS resource types from datacenter discovery
  You can configure which AWS resource types to exclude from AWS datacenter discovery, to avoid triggering discovery patterns in regions with only default resources.

• Configure Server CI creation during AWS cloud discovery
  Create Windows Server or Linux Server configuration items (CIs) during AWS cloud discovery by enabling the sn_itom_pattern.aws_cloud_discovery_populate_server_ci system property.

• Set the AWS SSM command wait time
  Increase the wait time for AWS Systems Manager (AWS SSM) commands to support Server CI creation on slow-responding EC2 instances.

Parent Topic:Available cloud discovery patterns

Related topics

Kubernetes discovery using patterns

AWS Certificate Manager discovery

Amazon Bedrock pattern-based discovery