---
sourceDocument: Yokohama IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/it-operations-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# CAL - AWS Generate Credential Report subflow

# CAL - AWS Generate Credential Report subflow {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Subflow that lists all users in your account and the status of their various credentials, including passwords, access keys, and MFA devices.

## Roles and availability {#cal-aws-generate-credential-report__section_zgc_jrk_gtb}

Subscription requirements
:   To use this subflow in custom flows, you must obtain an Integration Hub Enterprise subscription or an App Engine subscription. For more information, see [Request Integration Hub](https://www.servicenow.com/docs/access?context=request-ih-overview&version=yokohama&pubname=yokohama-integrate-applications&ft:locale=en-US).

Role requirements
:   This subflow requires roles granted by delegated development or assigned to
    the user. For more information, see [User access to Flow
    Designer](https://www.servicenow.com/docs/access?context=user-access-flow-designer&version=yokohama&pubname=yokohama-build-workflows&ft:locale=en-US).

## Cloud permission {#cal-aws-generate-credential-report__section_e4c_nxr_jtb}

To execute this subflow, the caller must have the
Iam:GetCredentialReport and Iam:GenerateCredentialReport cloud permission.

## Inputs {#cal-aws-generate-credential-report__section-inputs}

Provide a value for each input that your subflow needs. To add
dynamic values, you can also select data pills using the pill picker.{#cal-aws-generate-credential-report__inputs-description}

Credential Alias
:   Data type: Record

    Credential alias for the
    AWS credential.

Use Mid
:   Data type: True/False

    Selection to indicate whether to
    use a MID Server to make the outbound
    calls.

Mid Server
:   Data type: Record

    MID Server for
    making the outbound calls.

Api Version
:   Data type: String

    Version of the AWS API.

## Outputs {#cal-aws-generate-credential-report__section-outputs}

You can use these outputs as inputs for other
subflows.{#cal-aws-generate-credential-report__outputs-description}

Error
:   Data type: String

    Description of the error returned by the AWS endpoint.

credential_report_list
:   Data type: Array.Object

    Complex object containing all fields of the
    credential report.