--- sourceDocument: Yokohama Data and Automation sourceDocumentLink: https://www.servicenow.com/docs/r/yokohama/integrate-applications Release : - yokohama ft:locale : - en-US ft:publication_title : - Yokohama Data and Automation ft:clusterId : - crint bundleId : - crint workflow : - Creator --- # Amazon VPC Spoke # Amazon VPC Spoke {#ariaid-title1} * Release version: Yokohama * * Updated January 30, 2025 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read Provision a logically isolated section of the AWS cloud using Amazon VPC and launch the required AWS resources in a virtual network, from your ServiceNow instance. ## Request apps on the Store {#amazon-vpc-spoke__section_lmg_bxb_glb} Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/r/store-release-notes/sn-store-release-notes.html).{#amazon-vpc-spoke__inline-send-to-store} ## Integration Hub subscription {#amazon-vpc-spoke__section_c24_fbc_glb} This spoke requires an Integration Hub subscription. For more information, see [Legal schedules - IntegrationHub overview](https://www.servicenow.com/content/dam/servicenow-assets/public/en-us/doc-type/legal/snc-addendum-integrationhub.pdf). ## Spoke version {#amazon-vpc-spoke__section_y1m_l1v_bsb} Amazon VPC spoke v1.0.3 is the latest version.{#amazon-vpc-spoke__vpc-ver} ## Spoke dependencies {#amazon-vpc-spoke__section_odl_hbc_glb} If you're having trouble installing the app, ensure that these dependent plugins are installed: * ServiceNow IntegrationHub Action Template - Data Stream (com.glide.hub.action_type.datastream) * Complex Object (com.glide.cobject) * ServiceNow IntegrationHub Runtime (com.glide.hub.integration.runtime) * ServiceNow Flow Designer - Dynamic Inputs (com.glide.hub.dynamic_inputs) * ServiceNow IntegrationHub Action Step - REST (com.glide.hub.action_step.rest) {#amazon-vpc-spoke__ul_klr_3bc_glb} Note: Some of these plugins are licensable features and require an appropriate license if used outside the spoke implementation. For information on licenses, contact your account manager. ## Supported version {#amazon-vpc-spoke__section_xts_lbc_glb} This spoke was built for API version 2016-11-15, but may be compatible with later versions. Note: If you use different API version, ensure that you change the API version in all spoke actions. ## Spoke requirements {#amazon-vpc-spoke__section_owh_4bc_glb} * User with full access to Amazon VPC. * Access Key ID and Secret Access Key of the user. Record these values for later use. {#amazon-vpc-spoke__ul_a2f_mfc_glb}For more information about creating user in IAM and providing the required access, see [Understanding and Getting Your Security Credentials](https://docs.aws.amazon.com/general/latest/gr/aws-sec-cred-types.html) page on the [AWS Documentation](https://docs.aws.amazon.com/index.html) site. ## Spoke subflows {#amazon-vpc-spoke__section_vb2_gjc_glb} The Amazon VPC spoke provides sample subflows to demonstrate automating Amazon VPC tasks. To customize a sample subflow, copy it to a new application scope. Available sample subflows include:{#amazon-vpc-spoke__table_hbh_mjc_glb__entry__2} | Subflow | Description | |-|-| | Delete Subnet | Deletes the specified subnet. Before you delete the subnet, you must terminate all the running instances in the subnet. | | Delete VPC | Deletes the specified VPC. Before you delete the VPC, you must terminate all the associated instances. | [ ] {#amazon-vpc-spoke__table_hbh_mjc_glb} ## Spoke actions {#amazon-vpc-spoke__section_zfx_4bc_glb} The Amazon VPC spoke provides actions to automate Amazon VPC tasks when events occur in ServiceNow. Available actions include:{#amazon-vpc-spoke__table_dff_1cc_glb__entry__3} | Category | Action | Description | |-|-|-| | Network \& Security Group Management | Add Egress Rules To A Security Group | Adds the specified egress rules to a security group. | | Network \& Security Group Management | Add Ingress Rules To A Security Group | Adds the specified ingress rules to a security group. | | Network \& Security Group Management | Create Security Group | Creates a security group. | | Network \& Security Group Management | Delete Egress Rules From Security Group | Removes the specified egress rules from security group. Values must match the existing rule's values exactly. | | Network \& Security Group Management | Delete Ingress Rules From Security Group | Adds the specified ingress rules to a security group. | | Network \& Security Group Management | Delete Security Group | Deletes a security group. | | Network \& Security Group Management | List Security Groups | Lists the specified security groups or all of your security groups. | | Network \& Security Group Management | Lookup Security Group | Retrieves the specified security group. | | Virtual Private Cloud Management | Create Subnet | Creates a subnet in an existing VPC. | | Virtual Private Cloud Management | Create VPC | Creates a VPC with the specified IPv4 CIDR block and can optionally request an IPv6 CIDR block for the VPC. | | Virtual Private Cloud Management | Delete NAT Gateway | Deletes the specified NAT gateway. Deleting a NAT gateway disassociates its Elastic IP address, but does not release it. | | Virtual Private Cloud Management | Delete Route Table | Deletes the specified route table. You must disassociate the route table from any subnets before you can delete it. | | Virtual Private Cloud Management | Delete Subnet | Deletes the specified subnet. You must terminate all running instances in the subnet before you can delete the subnet. | | Virtual Private Cloud Management | Delete VPC | Deletes the specified VPC. You must detach or delete all gateways and resources that are associated with the VPC before you can delete it or use Delete VPC subflow. | | Virtual Private Cloud Management | Delete VPC Peering Connection | Deletes a VPC peering connection. Either the owner of the requester VPC or the owner of the accepter VPC can delete the VPC peering connection if it's in the active state. | | Virtual Private Cloud Management | Detach Internet Gateway | Detaches an internet gateway from a VPC, disabling connectivity between the internet and the VPC. | | Virtual Private Cloud Management | Detach Route Table | Disassociates a subnet from a route table. | | Virtual Private Cloud Management | List Internet Gateways | Retrieves the details of the required internet gateways. | | Virtual Private Cloud Management | List NAT Gateways | Retrieves the details of the required NAT gateways. | | Virtual Private Cloud Management | List Route Tables | Retrieves the details of the required route tables. | | Virtual Private Cloud Management | List Subnets | Retrieves the details of the required subnets in an existing VPC. | | Virtual Private Cloud Management | List VPC Peering Connections | Retrieves the details of the required VPC peering connections. | | Virtual Private Network Management | Detach VPN Gateway | Detaches a virtual private gateway from a VPC. | | Virtual Private Network Management | List VPN Gateways | Retrieves the details of the required virtual private gateways. | [ ] {#amazon-vpc-spoke__table_dff_1cc_glb} ## Connection and credential alias requirements {#amazon-vpc-spoke__section_k2k_rcc_glb} Integration Hub uses aliases to manage connection and credential information, and OAuth credentials. Using an alias eliminates the need to configure multiple credentials and connection information profiles when using multiple environments. If the connection or credential information changes, you don't need to update any actions that use the connection. For information about setting up the spoke, see [Set up the Amazon VPC spoke](https://www.servicenow.com/docs/77PxlAD1qf0RSFKlgo4eJA#setup-vpc "Integrate the ServiceNow instance and Amazon VPC using AWS credential to authenticate ServiceNow requests.").