The CreatorCon Call for Content is officially open! Get started here.

AWS Discovery with Assume Role

Breizh
Tera Contributor

We are using the Member to Master Discovery using Accessor account. This was set up earlier this year and worked like a champ until recently, following this document: https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB0957891#mcetoc_1f3jsltco19

 

Now, more often then not, discovery will fail, with the following error: The credentials can't be used with the account ID provided , Pattern name: Amazon AWS Service account. Without any change on the ServiceNow or AWS side, it occasionally works. I can't even tell where the failure is occurring: AWS or ServiceNow.

 

I opened a Support Ticket with ServiceNow but no luck so far. I would appreciate any pointers in where to start troubleshooting this issue.

1 REPLY 1

Breizh
Tera Contributor

The problem was solved by creating a single Discovery Schedule for the Master account, instead of the initial set up that had a Discovery Schedule for each account. I cannot recall whether that was the documented recommendation or some decision on my part. Either way, it now works, although it takes over an hour to discover all 30 sub-accounts.