---
sourceDocument: Yokohama IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/it-operations-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Create a scan configuration

# Create a scan configuration {#ariaid-title1}

* Release version: Yokohama
* 
* Updated January 30, 2025
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Create a scan configuration in Cloud Configuration Governance to scan the cloud
resources against one or more policy sets and identify the policy violations.

## Before you begin

* Ensure that a suitable policy set is available for the scan. The policy set enforces a given security or organizational standard. For more information on creating the policy set, see [Create a policy set](https://servicenow-prod.fluidtopics.net/mbkenQsOuu5EbeHaSPof4g "Create a policy set in Cloud Configuration Governance to group policies that enforce a given security or organization standard. When the scan configuration runs the policy set, it identifies the cloud resources that don’t adhere to the set standards. A policy set can contain one or more policies.").{#create-ccg-scan-configuration__li_md1_4fl_hsb}
{#create-ccg-scan-configuration__li_md1_4fl_hsb}
* Role required: sn_itom_ccg.scheduling_admin
{#create-ccg-scan-configuration__ul_dkw_qqv_gsb}

## About this task

Note:  
Starting with Cloud Configuration Governance version 1.3.7, the base system contents are moved to the CCG Content Pack. Install the CCG Content Pack to access the base system Cloud Configuration Governance contents.

## Procedure

1. Navigate to Cloud Configuration GovernanceScan Configurations.
2. Select New.
3. Fill the values on the Scan Configuration form.  
   For a description of the form fields, see [Cloud Configuration Governance Scan configuration form](https://servicenow-prod.fluidtopics.net/~cS0k6U3X_cZUOL4bAX6JQ "The Cloud Configuration Governance Scan configuration form displays detailed information about the scan configuration.").
4. Select Submit.
5. To create a schedule to execute the scan configuration, select Setup Schedule.
   1. **Optional:** Set a criteria to cancel the long running scan runs.  
      To import the configuration data of the cloud resources, Cloud Configuration Governance resource collectors and configuration collectors use Workflow Studio subflows. Sometimes, the subflow errors out and it doesn't report the error. In such cases, the scan run can run indefinitely. Setting a cancellation criteria helps to cancel such scans.
   {#create-ccg-scan-configuration__substeps_z1y_dpj_jtb}

## What to do next

Run the scan configuration to evaluate the resource configuration of the given cloud
against the specified policy sets and identify the policy violations. For more
information, see [Run the scan
configuration](https://servicenow-prod.fluidtopics.net/Z4U4snBfxxG4dmfEdLCBCA "Run a scan configuration to evaluate the resource configuration of the given cloud against the specified policy sets and identify the policy violations. Cloud Configuration Governance reports the identified policy violations as audit results.").

*[\>]: and then