Service Graph Connector for AWS - How to restrict AWS resource import to ServiceNow?

[anhpt]

Hi folks,

I am using Service Graph connector for AWS to import data from our AWS to ServiceNow. However, currently I face a problem that I do not know how to configure to filter which AWS data should be imported to ServiceNow and which is not as by default SG Connector will import all the data that it gets from the source (AWS). So I have some questions as below and need your help:

1. Can we customize and apply the filter when setting up the SG Connector AWS connection? If yes, could you please provide some advises on how to can do that?

2. If using SG Connectors for AWS, so AWS has responsible for configuring which source ServiceNow can get?

3. Can we have multiple SG connector for AWS connection (as well as its data sources and schedule import) to connect to a single Organization Unit? For example, we have several business areas, and each area have their own cloud service accounts. is it possible if configure the connections base on it?

Much appreciated for all your help.

[Pratiksha]

• You need to filter data in transform. if it is using IH ETL then you can simply disable class which you do not want to import. 
• It's the Servicenow Admin who will decide which source to take while ingesting the data. Read reconciliation rules to se how it can update the multisource cmdb. 
• when you install one service graph connector you can add the respective application registry or credentials

[anhpt]

Hi @Pratiksha ,

Thank you for your useful advise. Regarding my question, I have scenario like this:

We have a single AWS Org Unit account, under this have multiple Cloud Service Accounts and owned by different Business Units. So we want to separate the cloud resources which owned by specific Business Unit.

From ServiceNow side, if using SG connector, do we have any solutions to config to get AWS resource base on each of Business Units? Shall we configure the each credential for each of Cloud Service Accounts and then other cloud resources which related to those cloud service Accounts will be imported to ServiceNow?

[Sohail Khilji · Accepted solution]

Hi @anhpt ,

Here are your answers :

1. Can we customize and apply the filter when setting up the SG Connector AWS connection? If yes, could you please provide some advises on how to can do that?

Navigate > Go to IntegrationHub ETL >Here you would find all the transform conditons where you can apply filters to data on what is needed and what is not needed. Basically SG connectors use ETL transform map to transport data from source to target so here you can control on what is needed and what to avoid bringing in...

2. If using SG Connectors for AWS, so AWS has responsible for configuring which source ServiceNow can get?

Yes They can also control the resources from AWS end. Generally called scope which decides what to allow and what not to allow.

3. Can we have multiple SG connector for AWS connection (as well as its data sources and schedule import) to connect to a single Organization Unit? For example, we have several business areas, and each area have their own cloud service accounts. is it possible if configure the connections base on it?

Yes you can create multiple as per your needs , Only thing to remember is to give a unique prefix to each entity.

Eg:

Apple-SG-AWS-VMs

Tesla-SG-AWS-VMs

[anhpt]

Thanks a lot @Sohail Khilji , I will try base on your advise.