Discovery Schedules for AWS and Azure

Ronald Lucas TA · ‎03-16-2022

We are discovering AWS and Azure cloud resources and servers. In each cloud provider, we have many service accounts.

For AWS, since we have a master account, it appears we can rely on a single discovery schedule to discover cloud resources for all subaccounts. And then we use the "run after" schedule to discover the servers via their IP address. This seems to work great.

For Azure, it doesn't appear we have the same "master" account capability to discover Azure cloud resources for all service accounts. So we are creating discovery schedules for each service account along with the "run after" schedule to discover the servers. With a few hundred service accounts, this is bit of maintenance.

Does ServiceNow have the capability "out-of-the-box" to discover all Azure cloud resources using a single discovery schedule?

Raj_Esh · ‎03-16-2022

Hi Ronald,

Service principal can help?

Refer: Azure Cloud Discovery

Hope it helps.

Thanks,

Raj

--Raj

Ronald Lucas TA · ‎03-16-2022

Hi Raj.

We had already established an Azure service principal account. And within that account, when we click "Discover Subscriptions", we have been successfully creating Azure service accounts. So at this point we have the service accounts from Azure but no other cloud resources discovered yet.

I don't see a way to create a single discovery schedule to discover all of the cloud resources for all of the service accounts. ServiceNow documentation covers how to create the service principal account, how to discover the service accounts, and how to utilize alert driven discovery. But we are not utilizing alert driven discovery yet.

For now, the only way I can discover cloud resources for each Azure service account is to open each service account, click "Discover Datacenters", and then click "Create Discovery Schedule".

By the way, we are on Quebec.

Thanks,

Ron

SN Arch Guy · ‎09-06-2023

@Ronald Lucas TA did you find a way to create a single discovery schedule to discover all your azure cloud resources with just one azure master service account?