---
sourceDocument: Australia IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# AWS IAM User

# AWS IAM User pattern-based discovery {#ariaid-title1}

Release version: Australia  
Updated May 13, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read
Summarize  
![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI  
This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.  

## Summary of AWS IAM User pattern-based discovery

The AWS IAM User pattern-based discovery in ServiceNow leverages Discovery and Service Mapping Patterns to identify AWS IAM Users within your cloud environment.
This enables accurate population of AWS IAM User data into both CMDB and non-CMDB tables, supporting comprehensive cloud resource management and visibility.
Show full answer Show less  

## Prerequisites and Setup

* **AWS Discovery Prerequisites:** Ensure all AWS discovery prerequisites are met as outlined in the AWS discovery using patterns documentation.
* **Resource Inclusion List:** Verify that the IAM Users to be discovered are not present in the Resource Inclusion List table (\[sacloudinventoryresourcewhitelist\]) to prevent duplicate discovery.
* **Enabling the Pattern:** The AWS IAM User pattern is disabled by default and must be activated. Starting from Visibility Content version 6.28.0, enabling or disabling patterns does not count as customization and patterns reset to the latest version upon upgrades while preserving activation status.

## Data Management

When running the **Amazon AWS - IAM User - Extended Inventory (LP)** pattern, data is populated in the following ways:

* **Non-CMDB Tables:** The pattern stores detailed AWS IAM User metadata in non-CMDB tables accessible via *All \> Configuration \> AWS* or by searching the pattern name.
* **CMDB Tables:** Key AWS IAM User information is stored in the CMDB, specifically in the Cloud Resource (\[cmdbcicmpresource\]) table, enabling configuration management and operational tracking.

## Key Data Fields

* **AWS IAM User Table (\[cmdbawsiamuser\]):** Captures user name, ARN (object ID), user ID, organizational path, and links to the corresponding Cloud Resource CI.
* **Cloud Resource Table (\[cmdbcicmpresource\]):** Stores the IAM user name, ARN, resource type (fixed as AWS::IAM::User), install status (default Installed), and operational status (default Operational).
* **Key Value Table (\[cmdbkeyvalue\]):** Stores AWS tags collected during discovery, associating key-value pairs with the Cloud Resource CI for enhanced resource categorization.

## Configuration Item Relationships and References

* The pattern establishes relationships such as *Hosted on::Hosts* linking Cloud Resources to Cloud Service Accounts, enhancing traceability of IAM Users within your cloud service structure.
* References connect AWS IAM User records with their corresponding Cloud Resource CIs and tag key-value entries, supporting integrated CI data management.

## Benefits for ServiceNow Customers

This discovery pattern enables ServiceNow customers to automate the identification and inventory of AWS IAM Users, ensuring accurate and up-to-date representation of cloud identities in the CMDB. It supports improved security posture, compliance tracking, and operational insight by linking discovered users to relevant cloud service accounts and tagging metadata. By activating and properly configuring this pattern, customers can maintain a reliable and comprehensive cloud resource inventory within ServiceNow.  
Discovery and Service Mapping Patterns finds AWS IAM Users on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

## Pattern-based discovery and mapping requirements {#aws-iam-user__section_rpj_fj2_bgc}

Verify the AWS discovery prerequisites
:   For more information, see the prerequisites section in [AWS discovery using patterns](https://www.servicenow.com/docs/NFaTlkGaSxMWb2bQPsCnCA "Discovery and Service Mapping Patterns uses patterns to discover components of the Amazon AWS Cloud deployment during horizontal discovery. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.").

Remove resources from the Resource Inclusion List table
:   Verify that the relevant resource isn't listed in the Resource Inclusion List \[sa_cloud_inventory_resource_whitelist\] table to avoid duplicate discovery. For more information on removing resources from the Resource
    Inclusion List, see [AWS Resource Inventory discovery with Patterns](https://www.servicenow.com/docs/0pDNq0441mpy~sExfQvvqA "The ServiceNow Discovery and Service Mapping applications can find and map the AWS resources available by AWS Config Service. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.").

Enable the relevant pattern
:   The pattern for this service is disabled by default. Starting with Visibility Content version 6.28.0, activating or deactivating a pattern won't be considered a customization, and it will continue to receive updates. Patterns that were previously activated or deactivated will reset to the latest predefined version after upgrading while retaining the last active field value. For more information on enabling patterns, see [Activate a disabled pattern](https://www.servicenow.com/docs/aypCYVQdO8oFebLMLEI89g "If you want to use a pattern for discovery that's disabled by default, activate it manually.").{#aws-iam-user__activating-disabled-pattern-not-customization}
Discovery and Service Mapping Patterns application populates data in both CMDB and non-CMDB tables.

## Data stored in non-CMDB tables {#aws-iam-user__section_aq4_qkq_hfc}

Discovery and Service Mapping Patterns application populates data in the non-CMDB table when running the Amazon AWS - IAM User - Extended Inventory (LP) pattern.

You can review the non-CMDB
AWS tables by navigating to AllConfigurationAWS. You can also search the navigation filter for the specific pattern name.  
{#aws-iam-user__table_non_cmdb__entry__2}

| Field | Description |
|-|-|
| Name \[name\] | Name of the IAM user. |
| Object ID \[object_id\] | The Amazon Resource Name (ARN) of the IAM user. |
| User ID \[user_id\] | The stable and unique string identifying the user. |
| Path \[path\] | The path used to organize the user within the IAM hierarchy. If no custom path is set, the value is `/`. |
| Configuration Item \[configuration_item\] | References the Cloud Resource \[cmdb_ci_cmp_resource\] table. |
[Table 1. AWS IAM User \[cmdb_aws_iam_user\]]

{#aws-iam-user__table_non_cmdb}

## Data stored in CMDB tables {#aws-iam-user__section_ggp_ql2_bgc}

Discovery and Service Mapping Patterns application populates data in the CMDB when running the Amazon AWS - IAM User - Extended Inventory (LP) pattern.  
{#aws-iam-user__table_cmdb__entry__2}

| Field | Description |
|-|-|
| Name \[name\] | Name of the IAM user. |
| Object ID \[object_id\] | The ARN of the IAM user. |
| Resource type \[resource_type\] | Type of resource. The value is set to AWS::IAM::User. |
| Install Status \[install_status\] | Install status of the resource. Default value is Installed. |
| Operational status \[operational_status\] | Operational status of the resource. Default value is Operational. |
[Table 2. Cloud Resource \[cmdb_ci_cmp_resource\]]

{#aws-iam-user__table_cmdb}

## CI relationships {#aws-iam-user__section_dc4_ghc_dgc}

The Amazon AWS - IAM User - Extended Inventory (LP) pattern creates the following relationships and references to support AWS IAM User discovery. References link to records in other tables and don't appear in the CI Relationship \[cmdb_rel_ci\] table.  
{#aws-iam-user__table_relationships__entry__3}

| CI | Relationship | CI |
|-|-|-|
| Cloud Resource \[cmdb_ci_cmp_resource\] | Hosted on::Hosts | Cloud Service Account \[cmdb_ci_cloud_service_account\] |
[Table 3. CI relationships]

{#aws-iam-user__table_relationships}  
{#aws-iam-user__table_ci_references__entry__3}

| CI | Field | Referenced CI |
|-|-|-|
| AWS IAM User \[cmdb_aws_iam_user\] | Configuration Item \[configuration_item\] | Cloud Resource \[cmdb_ci_cmp_resource\] |
| Key Value \[cmdb_key_value\] | Configuration item \[configuration_item\] | Cloud Resource \[cmdb_ci_cmp_resource\] |
[Table 4. CI references]

{#aws-iam-user__table_ci_references}

## AWS Tag discovery {#aws-iam-user__section_lyw_zhc_dgc}

The Amazon AWS - IAM User - Extended Inventory (LP) pattern collects tags and populates them in the Key Value \[cmdb_key_value\] table.  
{#aws-iam-user__table_ojy_vss_5hc__entry__2}

| Field | Description |
|-|-|
| Key \[key\] | Tag name. |
| Value \[value\] | Tag value. |
| Configuration item \[configuration_item\] | References the Cloud Resource \[cmdb_ci_cmp_resource\] table. |
[Table 5. Key Value \[cmdb_key_value\]]

{#aws-iam-user__table_ojy_vss_5hc}

*[\>]: and then