--- sourceDocument: Australia IT Operations Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/it-operations-management Release : - australia ft:locale : - de-DE ft:publication_title : - Australia IT Operations Management ft:clusterId : - itom bundleId : - itom workflow : - Technology --- # Legacy Amazon AWS Cloud Discovery # Legacy Amazon AWS Cloud Discovery {#ariaid-title1} * Freigeben Version: Australia * * Aktualisiert 12. März 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 Minuten Lesedauer Use Cloud Discovery to discover virtual resources in your AWS organizations: management and member accounts. Make sure that you set up Cloud Discovery and provide all the necessary permissions and credentials for discovering AWS resources. For more information, see [Setting up AWS service accounts](https://servicenow-prod.fluidtopics.net/DOF48Jk0A_NECIHpPMLBrg "Create and configure cloud service accounts at ServiceNow AI Platform for the corresponding Amazon Web Services (AWS) service accounts."). ## Verify the REST API Permissions {#aws-cloud-discovery__id_ppz_r33_ydc} Download the [Cloud Discovery patterns spreadsheet](https://downloads.docs.servicenow.com/resource/enus/api/servicenow-discovery-patterns-api-details.xlsx) so you can grant user permissions required for running the Discovery patterns. In addition to permissions, the spreadsheet also includes useful information such as pattern names, types, CI Classes, and links to vendor documentation. New patterns are available quarterly, so check periodically to be sure you have the latest version of the spreadsheet.{#aws-cloud-discovery__cloud-discovery-api-paragraph} Hinweis: You can test the AWS REST APIs using Postman API platform. For more information, see the [How to test AWS REST API using POSTMAN \[KB0782183\]](https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0782183) article in the Now Support Knowledge Base. ## Discovered relationships between virtual machines, datacenters, and other CIs {#aws-cloud-discovery__section_idm_dqv_xz} {#aws-cloud-discovery__table_knh_2qv_xz__entry__3} | Class | Relationship | Class | |-|-|-| | Virtual Machine Instance \[cmdb_ci_vm_instance\] | Hosted on | AWS Datacenter \[cmdb_ci_aws_datacenter\] vCenter Datacenter \[cmdb_ci_vcenter_datacenter\] Hinweis: These tables extend Logical Datacenter \[cmdb_ci_logical_datacenter\]. The relationship between the VM and the specific type of datacenter is through the Logical Datacenter table. | | Virtual Machine Instance \[cmdb_ci_vm_instance\] | Virtualizes | Computer \[cmdb_ci_computer\] Hinweis: This is a virtual machine. The Is virtual field value is true. | | Logical Datacenter \[cmdb_ci_logical_datacenter\] | Contains | Resource Group \[cmdb_ci_resource_group\] | | Logical Datacenter \[cmdb_ci_logical_datacenter\] | Hosts | Public IP Address \[cmdb_ci_cloud_public_ip_address\] | | Logical Datacenter \[cmdb_ci_logical_datacenter\] | Hosted on | Cloud Service Account \[cmdb_ci_cloud_service_account\] | | Logical Datacenter \[cmdb_ci_logical_datacenter\] | Hosts | Storage Account \[cmdb_ci_cloud_storage_account\] | | Logical Datacenter \[cmdb_ci_logical_datacenter\] | Contains | Availability Zone \[cmdb_ci_availability_zone\] | | Logical Datacenter \[cmdb_ci_logical_datacenter\] | Contains | Host Cluster \[cmdb_ci_host_cluster\] | | Logical Datacenter \[cmdb_ci_logical_datacenter\] | Hosts | OS Template \[cmdb_ci_os_template\] | | Logical Datacenter \[cmdb_ci_logical_datacenter\] | Hosts | Compute Template \[cmdb_ci_compute_template\] | | Logical Datacenter \[cmdb_ci_logical_datacenter\] | Hosted on | Cloud Management Network Interfaces \[cmdb_ci_nic\] | | Cloud DataBase \[cmdb_ci_cloud_database\] | Owns | IP Address \[cmdb_ci_ip_address\] | | Cloud DataBase \[cmdb_ci_cloud_database\] | Hosted on | AWS Datacenter \[cmdb_ci_aws_datacenter\] | | Cloud DataBase \[cmdb_ci_cloud_database\] | Hosted on | Cloud Service Account \[cmdb_ci_cloud_service_account\] | [ ] {#aws-cloud-discovery__table_knh_2qv_xz} ## Data collected by Service Mapping during top-down discovery {#aws-cloud-discovery__section_mtq_nbg_ppb} To include discovered components into service instances, enable CI relationships used in tag-based discovery by Service Mapping. These CI relationships are available from the 1.0.68 release on the ServiceNow Store. For operational steps, see [Tag-based discovery configuration](https://servicenow-prod.fluidtopics.net/icbbyreoUvJ8l1PjBdxohw "You can refine the default configuration to control which CIs Service Mapping includes in application services during the tag-based discovery process."). Service Mapping uses tag-based discovery to create service instance maps including the Cloud components. The Service Mapping application comes with the following preconfigured CI relationships used for tag-based discovery. These CI relationships are available from the 1.0.68 release on the ServiceNow Store. {#aws-cloud-discovery__id_yqp_xhy_qpb__entry__3} | CI | Relationship | CI | |-|-|-| | Configuration Item \[cmdb_ci\] | Hosted on::Hosts | Logical Datacenter \[cmdb_ci_logical_datacenter\] | | Logical Datacenter \[cmdb_ci_logical_datacenter\] | Hosted on::Hosts | Cloud Service Account \[cmdb_ci_cloud_service_account\] | [ ] {#aws-cloud-discovery__id_yqp_xhy_qpb} ## AWS Config service {#aws-cloud-discovery__section_xdm_dwf_z1b} If you configured the [configure AWS Config service](https://servicenow-prod.fluidtopics.net/ClnWhmtPkzpimCx7jaFWFA "Configure the Amazon Web Services (AWS) Config service to send event notifications to the ServiceNow instance for any changes in the lifecycle state of a resource."), the instance can receive notifications when changes to cloud resources occur. Discovery can then take action and make updates. The instance can detect an AWS config notification with message type `ConfigurationItemChangeNotification` for these resource types: * AWS::DynamoDB::Table * AWS::EC2::Instance * AWS::EC2::SecurityGroup * AWS::EC2::Subnet * AWS::EC2::Volume * AWS::EC2::VPC * AWS::ElasticLoadBalancing::LoadBalancer * AWS::ElasticLoadBalancingV2::LoadBalancer * AWS::RDS::DBInstance * AWS::S3::Bucket {#aws-cloud-discovery__ul_pl5_tgh_wjb} Discovery can then make updates to records in the Response Mappings \[sn_cmp_response_mapping\] tables that have Cloud Event in the Datasource field. ## Amazon Connect Discovery API list {#aws-cloud-discovery__section_dlm_zsl_qmb} |-|-| | CI Attributes | AWS Attributes | | object_id | DescribeRegionsResponse.regionInfo.item.regionName | | name | DescribeRegionsResponse.regionInfo.item.regionName | | region | DescribeRegionsResponse.regionInfo.item.regionName | | status | Installed/Retired | [Tabelle : 1. AWS Datacenter (cmdb_ci_aws_datacenter)] {#aws-cloud-discovery__table_b5n_ctl_qmb} |-|-| | CI Attributes | AWS Attributes | | object_id | DescribeAvailabilityZonesResponse.availabilityZoneInfo.item.zoneName | | name | DescribeAvailabilityZonesResponse.availabilityZoneInfo.item.zoneName | | state | DescribeAvailabilityZonesResponse.availabilityZoneInfo.item.zoneState | | status | Installed/Retired | [Tabelle : 2. Availability Zone (cmdb_ci_availability_zone)] {#aws-cloud-discovery__table_c5k_ftl_qmb} |-|-| | CI Attributes | AWS Attributes | | object_id | DescribeAddressesResponse.addressesSet.item.allocationid | | name | DescribeAddressesResponse.addressesSet.item.elastic_name | | public_ip_address | DescribeAddressesResponse.addressesSet.item.eip | | region | DescribeAddressesResponse.addressesSet.item.region | | domain | DescribeAddressesResponse.addressesSet.item.domain | | status | Installed/Retired | [Tabelle : 3. Public IP Address (cmdb_ci_cloud_public_ipaddress)] {#aws-cloud-discovery__table_fkx_q5k_xwb} |-|-| | CI Attributes | AWS Attributes | | memory | DescribeInstancesResponse.reservationSet.item.instancesSet.item.instanceType - Call Hardware Types | | state | DescribeInstancesResponse.reservationSet.item.instancesSet.item.instanceState.name | | object_id | DescribeInstancesResponse.reservationSet.item.instancesSet.item.instanceId | | cpus | DescribeInstancesResponse.reservationSet.item.instancesSet.item.instanceType - Call Hardware Types | | disks | DescribeVolumesResponse.volumeSet.item.attachmentSet.item.blockDeviceMapping\[\].size | | nics | DescribeInstancesResponse.reservationSet.item.instancesSet.item.networkInterfaceSet\[\].size | | vm_inst_id | DescribeInstancesResponse.reservationSet.item.instancesSet.item.instanceId | | name | "DescribeInstancesResponse.reservationSet.item.instancesSet.item.tagSet.item.value==Name OR DescribeInstancesResponse.reservationSet.item.instancesSet.item.instanceId" | | status | Installed/Retired | [Tabelle : 4. Virtual Server (cmdb_ci_vm_instance)] {#aws-cloud-discovery__table_gws_gtl_qmb} |-|-| | CI Attributes | AWS Attributes | | state | DescribeVolumesResponse.volumeSet.item.status | | storage_type | block | | volume_id | DescribeVolumesResponse.volumeSet.item.volumeId | | name | "DescribeVolumesResponse.volumeSet.item.volumeId OR DescribeVolumesResponse.volumeSet.item.tagSet.value==Name" | | size_bytes | DescribeVolumesResponse.volumeSet.item.size \* 1024 \* 1024 \* 1024 | | object_id | DescribeVolumesResponse.volumeSet.item.volumeId | | size | DescribeVolumesResponse.volumeSet.item.size + "GB" | | status | Installed/Retired | [Tabelle : 5. Storage Volume (cmdb_ci_storage_volume)] {#aws-cloud-discovery__table_vpr_ktl_qmb} |-|-| | CI Attributes | AWS Attributes | | name | DescribeImagesResponseimagesSet.item.name | | object_id | DescribeImagesResponseimagesSet.item.imageId | | guest_os | DescribeImagesResponseimagesSet.item.platform | | image_type | DescribeImagesResponseimagesSet.item.imageType | | root_device_type | DescribeImagesResponseimagesSet.item.rootDeviceType | | image_source | DescribeImagesResponseimagesSet.item.imageLocation | | status | Installed/Retired | [Tabelle : 6. Image (cmdb_ci_os_template)] {#aws-cloud-discovery__table_zlq_ltl_qmb} |-|-| | CI Attributes | AWS Attributes | | is_shared | FALSE | | object_id | DescribeVpcsResponse.vpcSet.item.vpcId | | state | DescribeVpcsResponse.vpcSet.item.state | | netmask | Not applicable | | name | "DescribeVpcsResponse.vpcSet.item.tagSet.item.value \ OR DescribeVpcsResponse.vpcSet.item.cidrBlock+ ""\[""+DescribeVpcsResponse.vpcSet.item.tagSet.item.vpcId+""\]""" | | is_external | FALSE | | cidr | DescribeVpcsResponse.vpcSet.item.cidrBlock + DescribeVpcsResponse.vpcSet.item.cidrBlockAssociationSet.item.ipv6CidrBlock | | default_gateway | DescribeInternetGatewaysResponse.internetGatewaySet.item.internetGatewayId | | status | Installed/Retired | [Tabelle : 7. Network (cmdb_ci_network)] {#aws-cloud-discovery__table_axv_mtl_qmb} |-|-| | CI Attributes | AWS Attributes | | name | aws-service_account_name + region_name + DescribeKeyPairsResponse.keySet.item.keyName | | finger_print | DescribeKeyPairsResponse.keySet.item.keyFingerprint | | object_id | DescribeKeyPairsResponse.keySet.item.keyName | | status | Installed/Retired | [Tabelle : 8. Cloud Key Pair (cmdb_ci_cloud_key_pair)] {#aws-cloud-discovery__table_ex3_4tl_qmb} |-|-| | CI Attributes | AWS Attributes | | object_id | DescribeLoadBalancersResponse.DescribeLoadBalancersResult.LoadBalancerDescriptions.member.LoadBalancerName | | name | DescribeLoadBalancersResponse.DescribeLoadBalancersResult.LoadBalancerDescriptions.member.LoadBalancerName | | state | Available/ Terminated | | dns_name | DescribeLoadBalancersResponse.DescribeLoadBalancersResult.LoadBalancerDescriptions.member.DNSName | | fqdn | DescribeLoadBalancersResponse.DescribeLoadBalancersResult.LoadBalancerDescriptions.member.DNSName | | canonical_hosted_zone_name | DescribeLoadBalancersResponse.DescribeLoadBalancersResult.LoadBalancerDescriptions.member.CanonicalHostedZoneName | | canonical_hosted_zone_id | DescribeLoadBalancersResponse.DescribeLoadBalancersResult.LoadBalancerDescriptions.member.CanonicalHostedZoneNameID | | status | Installed/Retired | [Tabelle : 9. Cloud Load Balancer (cmdb_ci_cloud_load_balancer)] {#aws-cloud-discovery__table_w1l_rtl_qmb} |-|-| | CI Attributes | AWS Attributes | | category -- DB class ('templates' for CPU and memory)​ | https://rds.us-east-1.amazonaws.com/?Action=DescribeDBInstances​ | | object_id -- DB name (unique for each LDC)​ | https://rds.us-east-1.amazonaws.com/?Action=DescribeDBInstances\&DBInstanceIdentifier=\ | | fqdn -- DB endpoint address (DNS name)​ | https://tagging.us-east-1.amazonaws.com/ (tags discovery) | | tcp_port -- DB endpoint port​ | DescribeDBInstancesResponse.DescribeDBInstancesResult.DBInstances.Endpoint.Port Or DescribeDBClustersResponse.DescribeDBClustersResult.DBClusters.Port | | name -- DB name​ | DescribeDBInstancesResponse.DescribeDBInstancesResult.DBInstances.DBName Or DescribeDBClustersResponse.DescribeDBClustersResult.DBClusters.DBClusterIdentifier | | version -- DB version​ | DescribeDBInstancesResponse.DescribeDBInstancesResult.DBInstances.EngineVersion Or DescribeDBClustersResponse.DescribeDBClustersResult.DBClusters.EngineVersion | | type -- Database type (Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle Database, and SQL Server)​ | DescribeDBInstancesResponse.DescribeDBInstancesResult.DBInstances.Engine Or DescribeDBClustersResponse.DescribeDBClustersResult.DBClusters.Engine | | operational_status -- The status of the database​ | Operational/Non-Operational/Retired | | ip_address -- IP address of the FQDN​ | com.snc.sw.util.DNSUtils.resolveHostName( DescribeDBInstancesResponse.DescribeDBInstancesResult.DBInstances.Endpoint.AddressOrDescribeDBClustersResponse.DescribeDBClustersResult.DBClusters.Endpoint) | | vendor -- "Amazon" | Amazon | | fqdn -- DB endpoint address (DNS name)​ | DescribeDBInstancesResponse.DescribeDBInstancesResult.DBInstances.Endpoint.Address Or DescribeDBClustersResponse.DescribeDBClustersResult.DBClusters.Endpoint | [Tabelle : 10. AWS RDS (cmdb_ci_cloud_database)] {#aws-cloud-discovery__table_ctg_ttl_qmb} |-|-| | CI Attributes | AWS Attributes | | name | "DescribeSubnetsResponse.subnetSet.item.cidrBlock OR DescribeSubnetsResponse.subnetSet.item.tagSet.item.value \" | | object_id | DescribeSubnetsResponse.subnetSet.item.subnetId | | cidr | DescribeSubnetsResponse/subnetSet/item/cidrBlock + /DescribeSubnetsResponse/subnetSet/item/ipv6CidrBlockAssociationSet/item/ipv6CidrBlock/ | | status | Installed/Retired | | state | DescribeSubnetsResponse.subnetSet.item.state | | available_ip_count | DescribeSubnetsResponse.subnetSet.item.availableIpAddressCount | [Tabelle : 11. Cloud subnet (cmdb_ci_cloud_subnet)] {#aws-cloud-discovery__table_cws_wtl_qmb} |-|-| | CI Attributes | AWS Attributes | | name | DescribeNetworkInterfacesResponse.networkInterfaceSet.item.networkInterfaceId | | private_ip | DescribeNetworkInterfacesResponse.networkInterfaceSet.item.privateIpAddress | | object_id | DescribeNetworkInterfacesResponse.networkInterfaceSet.item.networkInterfaceId | | public_ip | DescribeNetworkInterfacesResponse.networkInterfaceSet.item.asscoiation.publicIp | | gateway | Not applicable | | private_dns | DescribeNetworkInterfacesResponse.networkInterfaceSet.item.privateDnsName | | state | In Use/Terminated | | owner | Not applicable | | netmask | 255.255.255.0 | | is_source_dest_check | DescribeNetworkInterfacesResponse.networkInterfaceSet.item.sourceDestCheck | | public_dns | DescribeNetworkInterfacesResponse.networkInterfaceSet.item.asscoiation.publicDnsName | | status | Installed/Retired | [Tabelle : 12. Cloud Network (Interfaces cmdb_ci_nic)] {#aws-cloud-discovery__table_nvp_xtl_qmb} |-|-| | CI Attributes | AWS Attributes | | name | DescribeVolumesResponse.volumeSet.item.attachmentSet.item.blockDeviceMapping.ebs.volumeId | | object_id | DescribeVolumesResponse.volumeSet.item.attachmentSet.item.blockDeviceMapping.ebs.volumeId | | mapping_type | DescribeVolumesResponse.volumeSet.item.attachmentSet.item.blockDeviceMapping.rootDeviceType | | host | DescribeVolumesResponse.volumeSet.item.attachmentSet.item.blockDeviceMapping.publicIPAddress | | mount_point | DescribeVolumesResponse.volumeSet.item.attachmentSet.item.blockDeviceMapping.rootDeviceName | [Tabelle : 13. Storage Mapping (cmdb_ci_storage_mapping)] {#aws-cloud-discovery__table_idm_ytl_qmb} |-|-| | CI Attributes | AWS Attributes | | object_id | DescribeSecurityGroupsResponse.securityGroupInfo.item.groupId | | name | DescribeSecurityGroupsResponse.securityGroupInfo.item.groupName | | state | Available/Terminated | | status | Installed/Retired | [Tabelle : 14. Security Groups (cmdb_ci_compute_security_group)] {#aws-cloud-discovery__table_qnk_c5l_qmb} |-|-| | CI Attributes | AWS Attributes | | object_id | No AWS Response | | name | DescribeInstanceTypesResponse.instanceTypeSet.item.instanceType | | vcpus | DescribeInstanceTypesResponse.instanceTypeSet.item.vCpuInfo.defaultVCpus | | memory_mb | DescribeInstanceTypesResponse.instanceTypeSet.item.memoryInfo.sizeInMiB | | local_storage_gb | DescribeInstanceTypesResponse.instanceTypeSet.item.instanceStorageInfo.totalSizeInGB | | cores | DescribeInstanceTypesResponse.instanceTypeSet.item.vCpuInfo.defaultCores | | status | Installed/Retired | [Tabelle : 15. Hardware Types (cmdb_ci_compute_template)] {#aws-cloud-discovery__table_pqp_d5l_qmb} |-|-| | CI Attributes | AWS Attributes | | object_id | \ | | name | \ | | ipaddress_type | \ | | status | Installed/Retired | [Tabelle : 16. Cloud Public IP Address (cmdb_ci_cloud_lb_ipaddress)] {#aws-cloud-discovery__table_dy5_g5l_qmb} |-|-| | CI Attributes | AWS Attributes | | name | DescribeLoadBalancersResponse.DescribeLoadBalancersResult.LoadBalancers.DNSName:DescribeListenersResponse.DescribeListenersResult.Listeners.Port | | object_id | DescribeLoadBalancersResponse.DescribeLoadBalancersResult.LoadBalancers.DNSName:DescribeListenersResponse.DescribeListenersResult.Listeners.Port | | port | DescribeListenersResponse.DescribeListenersResult.Listeners.Port | | server_port | DescribeListenersResponse.DescribeListenersResult.Listeners.Port | | server_protocol | DescribeListenersResponse.DescribeListenersResult.Listeners.Protocol | | listener_protocol | DescribeListenersResponse.DescribeListenersResult.Listeners.Protocol | | status | Installed/Retired | | ssl_certificate_id | Not applicable | [Tabelle : 17. Cloud Load Balancer Service (cmdb_ci_lb_service)] {#aws-cloud-discovery__table_mdr_l5l_qmb}