---
sourceDocument: Yokohama IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/it-operations-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# AWS discovery solutions comparison

# AWS discovery solutions comparison {#ariaid-title1}

* Release version: Yokohama
* 
* Updated August 12, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read

ITOM Visibility applications discover a variety of AWS resources and populate the relevant configuration item (CI) classes in the Configuration Management Database (CMDB) with their attributes.

## ITOM Visibility solutions {#aws-discovery-methods__section_z3r_kvh_hfc}

ITOM Visibility can offer you comprehensive visibility into your organization's cloud infrastructure. Each application offers unique strengths and capabilities, and by comparing them you can gain holistic insights on their capabilities and benefits.{#aws-discovery-methods__table_sld_tvh_hfc__entry__3}

| ITOM Visibility solution | Overview | Configuration |
|-|-|-|
| Discovery and Service Mapping Patterns and Visibility Content | [Discovery patterns used by ITOM Visibility](https://servicenow-prod.fluidtopics.net/_qxdmD6N5su6Ad7JOjMRVQ "Service Mapping and Discovery use patterns in their discovery process that cover most industry standard network devices and applications. You can customize these patterns and create new ones.") | * You must update your store apps to the latest release version. * You must provide ITOM Visibility with access permissions. For more information, see [Set up AWS service accounts](https://servicenow-prod.fluidtopics.net/UO4WIwvrPVWckI9LeWzMRg "Create and configure cloud service accounts at ServiceNow AI Platform for the corresponding Amazon Web Services (AWS) service accounts.") {#aws-discovery-methods__ul_cgf_3wh_hfc} |
| Service Graph Connector for AWS | [Service Graph Connector for AWS](https://www.servicenow.com/docs/access?context=cmdb-integration-aws-sg&version=yokohama&pubname=yokohama-servicenow-platform&ft:locale=en-US) | [Configure Service Graph Connector for AWS using the guided setup](https://www.servicenow.com/docs/access?context=configure-aws-integration&version=yokohama&pubname=yokohama-servicenow-platform&ft:locale=en-US) |
[Table 1. ITOM Visibility solutions for discovering AWS]

{#aws-discovery-methods__table_sld_tvh_hfc} Note:  
The CI class, in most cases, is applicable to both solutions. If it's not applicable to one of the solutions, the solution is marked "N/A".
{#aws-discovery-methods__table_jqp_vgh_hfc__entry__4}

| Resource type | Supported by Cloud Discovery and Service Mapping Patterns | Supported by Cloud Service Graph Connectors | CI Class |
|-|-|-|-|
| AWS::AppSync::API | Yes | No | cmdb_aws_appsync_api |
| AWS::Athena::Workgroup | Yes | No | cmdb_aws_athena_workgroup |
| AWS::Backup::BackupPlan | Yes | No | cmdb_aws_backup_backup_plan |
| AWS::Backup::BackupVault | Yes | No | cmdb_aws_backup_backup_vault |
| AWS::CloudFront::Distribution | Yes | N/A | cmdb_aws_cloudfront_distribution |
| AWS::CloudFront::Distribution | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::CloudWatch::Log | Yes | No | cmdb_aws_cloudwatch_log |
| AWS::CodeDeployment::Deployment | Yes | No | cmdb_aws_codedeploy_deployment |
| AWS::CodePipeline::Pipeline | Yes | N/A | cmdb_aws_codepipeline_pipeline |
| AWS::CodePipeline::Pipeline | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::DMS::Endpoint | Yes | No | cmdb_aws_dms_endpoint |
| AWS::ElasticBeanstalk::Application | Yes | N/A | cmdb_aws_elastic_beanstalk_application |
| AWS::ElasticBeanstalk::Application | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::EMR::Cluster | Yes | No | cmdb_aws_emr_cluster |
| AWS::EventBridge::EventBus | Yes | No | cmdb_aws_eventbridge_event_bus |
| AWS::FSx::Backup | Yes | No | cmdb_aws_fsx_backup |
| AWS::FSx::FileSystem | Yes | No | cmdb_aws_fsx_file_system |
| AWS::Glue::Database | Yes | No | cmdb_aws_glue_database |
| AWS::IAM::Policy | Yes | N/A | cmdb_aws_iam_policy |
| AWS::IAM::Policy | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::IAM::Role | Yes | N/A | cmdb_aws_iam_role |
| AWS::IAM::Role | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::IAM::User | Yes | N/A | cmdb_aws_iam_user |
| AWS::IAM::User | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::KMS::Key | Yes | No | cmdb_aws_kms_key |
| AWS::MQ::Broker | Yes | No | cmdb_aws_mq_broker |
| AWS::MQ::Configuration | Yes | No | cmdb_aws_mq_configuration |
| AWS::S3::GlacierVault | Yes | No | cmdb_aws_s3_glacier_vault |
| AWS::SageMaker::NotebookInstance | Yes | No | cmdb_aws_sagemaker_notebook_instance |
| AWS::SecretsManager::Secret | Yes | No | cmdb_aws_secrets_manager_secret |
| AWS::SimpleEmailService::Identity | Yes | No | cmdb_aws_simple_email_service_identity |
| AWS::SQS::Queue | Yes | No | cmdb_aws_sqs_queue |
| AWS::StepFunctions::StateMachine | Yes | No | cmdb_aws_step_functions_state_machine |
| AWS::StorageGateway::Gateway | Yes | No | cmdb_aws_storage_gateway_gateway |
| AWS::SystemsManager::Document | Yes | No | cmdb_aws_systems_manager_document |
| AWS::SystemsManager::ParameterStore | Yes | No | cmdb_aws_systems_manager_parameter_store |
| AWS::TransferFamily::Server | Yes | No | cmdb_aws_transfer_family_server |
| AWS::VPC::FlowLog | Yes | No | cmdb_aws_vpc_flow_log |
| AWS::VPC::ManagedPrefixList | Yes | No | cmdb_aws_vpc_managed_prefix_list |
| AWS::XRay::SamplingRule | Yes | No | cmdb_aws_xray_sampling_rule |
| ec2:DescribeAvailabilityZones | Yes | Yes | cmdb_ci_availability_zone |
| ec2:DescribeRegions | Yes | Yes | cmdb_ci_aws_datacenter |
| AWS::Kinesis::Stream | Yes | No | cmdb_ci_aws_kinesis_data |
| AWS::KinesisAnalytics | Yes | No | cmdb_ci_aws_kinesis_data_analytics |
| AWS::KinesisFirehose | Yes | No | cmdb_ci_aws_kinesis_firehose |
| AWS::KinesisVideo | Yes | No | cmdb_ci_aws_kinesis_video |
| AWS::Redshift::Cluster | Yes | N/A | cmdb_ci_aws_redshift |
| AWS::Redshift::Cluster | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::CertificateManager::Certificate | Yes | No | cmdb_ci_certificate |
| AWS::Cognito::UserPool | Yes | No | cmdb_ci_cloud_authentication |
| AWS::RDS::DBInstance | Yes | Yes | cmdb_ci_cloud_database |
| AWS::ECS::Cluster | Yes | No | cmdb_ci_cloud_ecs_cluster |
| AWS::ECS::Service | Yes | No | cmdb_ci_cloud_ecs_service |
| AWS::ECS::TaskDefinition | Yes | No | cmdb_ci_cloud_ecs_task_definition |
| AWS::Lambda::Function | Yes | Yes | cmdb_ci_cloud_function |
| AWS::ApiGateway::RestApi | Yes | Yes | cmdb_ci_cloud_gateway |
| ec2:DescribeInstanceTypes | Yes | Yes | cmdb_ci_cloud_hardware_type |
| AWS::EC2::Host | Yes | No | cmdb_ci_cloud_host |
| AWS::EC2::KeyPair | Yes | No | cmdb_ci_cloud_key_pair |
| AWS::ElasticLoadBalancingV2::LoadBalancer | Yes | Yes | cmdb_ci_cloud_load_balancer |
| Amazon::S3::Bucket | Yes | Yes | cmdb_ci_cloud_object_storage |
| Organizations | Yes | Yes | cmdb_ci_cloud_org or cmdb_ci_cloud_service_account |
| Organizations::AWS accounts | Yes | Yes | cmdb_ci_cloud_service_account |
| AWS::EC2::Subnet | Yes | Yes | cmdb_ci_cloud_subnet |
| AWS SSM agents | Yes | No | cmdb_ci_cloud_system_management_agent |
| AWS::EC2::Subnet | Yes | No | cmdb_ci_cloud_subnet |
| AWS::WAF::WebACL | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::WAFRegional::WebACL | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::ACM::Certificate | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::Redshift::EventSubscription | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::RDS::DBSnapshot | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::Redshift::ClusterParameterGroup | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::AutoScaling::LaunchConfiguration | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::Redshift::ClusterSnapshot | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::CloudFormation::Stack | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::CodeBuild::Project | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::ElasticBeanstalk::ApplicationVersion | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::Redshift::ClusterSecurityGroup | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::CloudTrail::Trail | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::CloudFront::StreamingDistribution | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::WAF::RuleGroup | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::RDS::DBSecurityGroup | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::RDS::EventSubscription | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::WAF::Rule | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::AutoScaling::ScheduledAction | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::ElasticBeanstalk::Environment | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::AutoScaling::ScalingPolicy | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::Shield::Protection | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::CloudWatch::Alarm | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::XRay::EncryptionConfig | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::ShieldRegional::Protection | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::Redshift::ClusterSubnetGroup | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::IAM::Group | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::WAFRegional::RateBasedRule | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::WAFRegional::RuleGroup | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::WAF::RateBasedRule | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::RDS::DBSubnetGroup | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::SSM::AssociationCompliance | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::EC2::SecurityGroup | Yes | Yes | cmdb_ci_compute_security_group |
| ec2:DescribeInstanceTypes | Yes | Yes | cmdb_ci_compute_template |
| AWS::ECR::Repository | Yes | No | cmdb_ci_container_repository |
| AWS::EC2::CustomerGateway | Yes | No | cmdb_ci_customer_gateway |
| Docker container | Yes | Yes | cmdb_ci_docker_container |
| ecr:DescribeImages | Yes | No | cmdb_ci_docker_image |
| AWS::DynamoDB::GlobalTable | Yes | Yes | cmdb_ci_dynamodb_table |
| AWS::AutoScaling::AutoScalingGroup | Yes | N/A | cmdb_ci_instance_scale_set |
| AWS::AutoScaling::AutoScalingGroup | N/A | Yes | cmdb_ci_cmp_resource |
| AWS::EC2::InternetGateway | Yes | No | cmdb_ci_internet_gateway |
| AWS::EKS::Cluster | Yes | Yes | cmdb_ci_kubernetes_cluster |
| WS::ElasticLoadBalancingV2::TargetGroup | Yes | No | cmdb_ci_lb_pool |
| AWS::ElasticLoadBalancingV2::TargetGroup TargetDescription | Yes | No | cmdb_ci_lb_pool_member |
| AWS::ElasticLoadBalancingV2::Listener | Yes | No | cmdb_ci_lb_service |
| AWS::EC2::NatGateway | Yes | No | cmdb_ci_nat_gateway |
| AWS::EC2::VPC | Yes | Yes | cmdb_ci_network |
| AWS::EC2::NetworkAcl | Yes | No | cmdb_ci_network_acl |
| AWS::EC2::NetworkInterface | Yes | Yes | cmdb_ci_nic |
| AWS::EC2::RouteTable | Yes | No | cmdb_ci_route_table |
| AWS::EC2::VolumeAttachment | Yes | Yes | cmdb_ci_storage_mapping |
| AWS::EC2::Volume | Yes | Yes | cmdb_ci_storage_volume |
| AWS::EC2::VPNGateway | Yes | No | cmdb_ci_virtual_pvt_gateway |
| AWS::EC2::VPNConnection | Yes | No | cmdb_ci_vpn_connection |
| AWS::WAFv2::WebACL | Yes | N/A | cmdb_ci_web_acl |
| AWS::WAFv2::WebACL | N/A | Yes | cmdb_ci_cmp_resource |
| Tags | Yes | Yes | cmdb_key_value |
| Kubernetes DaemonSet | No | Yes | cmdb_ci_kubernetes_daemonset |
| Kubernetes deployment | No | Yes | cmdb_ci_kubernetes_deployment |
| Kubernetes namespace | No | Yes | cmdb_ci_kubernetes_namespace |
| Amazon EKS node | No | Yes | cmdb_ci_kubernetes_node |
| Amazon EKS pod | No | Yes | cmdb_ci_kubernetes_pod |
| Amazon EKS service | No | Yes | cmdb_ci_kubernetes_service |
| Kubernetes Volume | No | Yes | cmdb_ci_kubernetes_volume |
| AWS::SSM::ManagedInstanceInventory | No | Yes | cmdb_ci_spkg |
| AWS::EC2::VPCPeeringConnection | Yes | No | cmdb_aws_elastic_compute_cloud_vpc_peering_connection |
| AWS::Elastic Compute Cloud::VPC Endpoint Service | Yes | No | cmdb_aws_elastic_cloud_compute_vpc_endpoint_service |
| AWS::Elastic Compute Cloud::EBS Snapshot | Yes | No | cmdb_aws_elastic_cloud_compute_ebs_snapshot |
| AWS::Elastic Compute Cloud::Reserved Instance | Yes | No | cmdb_aws_elastic_cloud_compute_reserved_instance |
| AWS::RDS::DBSnapshot | Yes | No | cmdb_aws_relational_database_services_db_snapshot |
| AWS::SageMaker::Training Job | Yes | No | cmdb_aws_sagemaker_training_job |
| AWS::Elastic File System::File System | Yes | No | cmdb_aws_elastic_file_system_file_system |
| AWS::Redshift Serverless::Namespace | Yes | No | cmdb_aws_redshift_serverless_namespace |
| AWS::Redshift Serverless::Workgroup | Yes | No | cmdb_aws_redshift_serverless_workgroup |
| AWS::Redshift Serverless::Snapshot | Yes | No | cmdb_aws_redshift_serverless_snapshot |
| AWS::ElastiCache::Snapshot | Yes | No | cmdb_aws_elasticache_snapshot |
| AWS::CloudTrail::Trail | Yes | No | cmdb_aws_cloudtrail_trail |
| AWS::Batch::ComputeEnvironment | Yes | No | cmdb_aws_batch_compute_environment |
| AWS::StorageGateway::FileShare | Yes | No | cmdb_aws_storage_gateway_file_share |
| AWS::DataSync::Task | Yes | No | cmdb_aws_datasync_task |
| AWS::API Gateway::Domain Name | Yes | No | cmdb_aws_api_gateway_domain_name |
| AWS DynamoDB Cluster | Yes | No | cmdb_ci_cluster_node |
| AWS::GlobalAccelerator::Accelerator | Yes | No | cmdb_aws_global_accelerator_accelerator |
| AWS::Timestream::InfluxDBInstance | Yes | No | cmdb_aws_timestream_for_influxdb_database_instance |
| AWS::CloudHSM::HSM | Yes | No | cmdb_aws_cloudhsm_hsm |
| AWS::MWAA::Environment | Yes | No | cmdb_aws_managed_workflows_for_apache_airflow_environment |
| AWS::NetworkFirewall::Firewall | Yes | No | cmdb_aws_network_firewall_firewall |
[Table 2. Discovery and Service Mapping Patterns vs Service Graph Connector for AWS]

{#aws-discovery-methods__table_jqp_vgh_hfc}