Azure Private Link Private Endpoint pattern-based discovery
Summarize
Summary of Azure Private Link Private Endpoint pattern-based discovery
The Azure Private Link Private Endpoint pattern-based discovery in ServiceNow enables automated identification and mapping of Azure Private Link Private Endpoint resources within your cloud environment. This capability is part of the Discovery and Service Mapping Patterns application, designed to populate relevant resource data into both CMDB and non-CMDB tables for comprehensive asset and relationship management.
Show less
Key Features
- Pattern Activation: The Azure Private Link Private Endpoint discovery pattern is disabled by default and must be enabled to start discovering resources. Pattern activation is non-customizable, ensuring updates are maintained with each application upgrade.
- Support for GovCloud: Discovery supports Azure GovCloud (US) environments by requiring configuration of the Azure service account with a datacenter URL specific to GovCloud.
- Data Storage: Resource data is stored both in non-CMDB tables—such as cmdbazureprivatelinkprivateendpoint—and CMDB tables like cmdbcicmpresource, allowing detailed inventory and configuration management.
- Comprehensive Resource Attributes: Key fields collected include resource kind, location, object ID, provisioning and operational state, resource group, subscription and tenant IDs, and install status.
- CI Relationships: The pattern establishes relationships between discovered private endpoints, resource groups, cloud resources, and Azure datacenters to provide a holistic view of dependencies and hosting infrastructure.
- Tag Discovery: Azure tags are collected and stored in the Key Value table (cmdbkeyvalue), capturing tag names and values for enhanced resource categorization and filtering.
Practical Considerations for ServiceNow Customers
- Ensure all Microsoft Azure discovery prerequisites are met before enabling the pattern to guarantee accurate discovery results.
- Activate the Azure Private Link Private Endpoint pattern via the Discovery and Service Mapping Patterns application to begin discovery and mapping.
- Configure discovery schedules appropriately, especially when working with Azure GovCloud accounts, by specifying the correct datacenter URL in the Azure service account setup.
- Leverage the populated CMDB and non-CMDB tables to maintain up-to-date asset inventories, analyze resource relationships, and manage cloud governance effectively.
Expected Outcomes
By implementing this pattern-based discovery, ServiceNow customers gain automated visibility into their Azure Private Link Private Endpoint resources with detailed metadata and relationships. This enables improved configuration management, operational awareness, and supports compliance and governance initiatives within the ServiceNow platform.
Discovery and Service Mapping Patterns finds Azure services on your cloud environment. Discovering some of these resources may require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.
Pattern-based discovery and mapping requirements
- Verify the Microsoft Azure discovery prerequisites
- For more information, see the prerequisites section in Microsoft Azure Cloud components discovery using patterns.
- Enable the relevant pattern
- The pattern for this service is disabled by default. Starting with Visibility Content version 6.28.0, activating or deactivating a pattern won't be considered a customization, and it will continue to receive updates. Patterns that were previously activated or deactivated will reset to the latest predefined version after upgrading while retaining the last active field value. For more information on enabling patterns, see Activate a disabled pattern.
- Configure the Discovery schedule to support GovCloud
- Discovering Azure GovCloud (US) accounts requires using a datacenter URL when setting up an Azure service account. For more information, see Set up Azure service accounts.
Discovery and Service Mapping Patterns application populates data in both CMDB and non-CMDB tables.
Data stored in non-CMDB tables
Discovery and Service Mapping Patterns application populates data in the non-CMDB table when running the Azure - Private Link Private Endpoint - Extended Inventory(LP) pattern.
You can review the non-CMDB Azure tables by navigating to . You can also search the navigation filter for the specific pattern name.
| Field | Description |
|---|---|
| Kind [kind] | The specific category or variant of the resource type. |
| Location [location] | The geographic region where the resource is deployed. |
| Object Id [object_id] | The unique identifier for the resource. |
| Provisioning State [provisioning_state] | The current provisioning or deployment state of the resource. |
| Resource Group [resource_group] | Name of the resource group. |
| Subscription ID [subscription_id] | The subscription ID. |
| Tenant ID [tenant_id] | The identifier for the tenant associated with the resource. |
| Configuration Item [configuration_item] | References the Cloud Resource [cmdb_ci_cmp_resource] table. |
Data stored in CMDB tables
Discovery and Service Mapping Patterns application populates data in the CMDB when running the Azure - Private Link Private Endpoint - Extended Inventory(LP) pattern.
| Field | Description |
|---|---|
| Install Status [install_status] | Install status of the resource. Default value is Installed. |
| Location [location] | The geographic region where the resource is deployed. |
| Name [name] | The name of the resource. |
| Object ID [object_id] | The unique identifier for the resource. |
| Operational status [operational_status] | Operational status of the resource. Default value is Operational. |
| Resource type [resource_type] | Type of resource. The value is set to microsoft.network/privateendpoints. |
CI relationships
The pattern creates these relationships to support discovery.
| CI | Relationship | CI |
|---|---|---|
| Resource Group [cmdb_ci_resource_group] | Contains::Contained by | Cloud Resource [cmdb_ci_cmp_resource] |
| Cloud Resource [cmdb_ci_cmp_resource] | Hosted on::Hosts | Azure Datacenter [cmdb_ci_azure_datacenter] |
| Azure Private Link - Private Endpoint [cmdb_azure_private_link_private_endpoint] | References | Cloud Resource [cmdb_ci_cmp_resource] |
Azure tag discovery
| Field | Description |
|---|---|
| Key [key] | Tag name. |
| Value [value] | Tag value. |