--- sourceDocument: Australia IT Operations Management sourceDocumentLink: https://www.servicenow.com/docs/r/australia/it-operations-management Release : - australia ft:locale : - en-US ft:publication_title : - Australia IT Operations Management ft:clusterId : - itom bundleId : - itom workflow : - Technology --- # Create cloud credentials # Create cloud credentials {#ariaid-title1} Release version: Australia Updated April 28, 2026 ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read Create cloud credentials to manage access to cloud-based applications, including Amazon Web Services, Microsoft Azure, and Google Cloud. Discovery uses these credentials to connect to your cloud provider accounts and discover cloud resources. ## Before you begin Verify the following: * You're using the Zurich Patch 8 or later version of the ServiceNow AI Platform. * You have installed the ITOM Visibility plugin. For more information, see [Install ITOM Visibility using ServiceNow Otto for Setup](https://www.servicenow.com/docs/8UUSVURw5sB5pnKUOeF36A "Install all required ITOM Visibility applications and plugins from the IT Operations Management Product Hub."). * You have installed the ServiceNow Otto for IT Operations Management (ITOM) plugin. For more information, see [Install ServiceNow Otto for ITOM](https://www.servicenow.com/docs/hn3sjJUr8u96rQ9j6HOmLg "Install the ServiceNow Otto for IT Operations Management (ITOM) plugin to enable generative AI and agentic AI on your instance."). * You're on the Configure IT Operations Management page of the Configuration Console. For more information, see [Access the ITOM Configuration Console](https://www.servicenow.com/docs/XDhZoiPi_NWLBF6X0sxZMA "Access the IT Operations Management Configuration Console to set up Discovery."). {#create-cloud-credentials__ul_fg5_1tx_bjc} Role required: discovery_admin ## About this task Cloud credentials store the authentication information that Discovery needs to access your cloud provider accounts. Before you create cloud credentials, verify that you have the required access and permissions configured in your cloud provider environment. The specific configuration requirements vary by cloud provider. For more information about cloud provider setup and permissions, see [Discovery for cloud environment](https://www.servicenow.com/docs/ejJ0kQqjaz9JQ8oFzUjrdg "ITOM Visibility cloud discovery solutions enable you to collect detailed information about your cloud-based infrastructure and your resources in major cloud service providers: Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP), IBM Cloud Platform, Oracle Cloud Infrastructure (OCI), and Alibaba Cloud."). ## Procedure 1. Navigate to Configuration SummaryDiscoveryDiscovery Setup. 2. Select Cloud credentials. 3. From the Credential type drop-down list, select a credential type. The following credential types are available for Cloud credentials.{#create-cloud-credentials__entry__2} | Credential type | Description | |-|-| | [Alibaba Cloud API](https://www.servicenow.com/docs/tcROb4Nk4Bu2ISPSlxlS~A "Create Alibaba Cloud API credentials on the ServiceNow AI Platform to enable access to your Alibaba Cloud resources during Alibaba Cloud discovery.") | API credentials for discovering Alibaba Cloud resources. Requires an AccessKey ID and AccessKey secret from the Alibaba Cloud Console. | | [AWS](https://www.servicenow.com/docs/access?context=r_CloudManagementCredentialsForm&version=australia&pubname=australia-platform-security&ft:locale=en-US) | Credentials for discovering Amazon Web Services cloud resources. | | [AWS SSM Instance User](https://www.servicenow.com/docs/kiXnsrdgJs_jKwUhej9COA "Define a non-root user for AWS SSM discovery by creating a credential record that specifies a user name with sufficient privileges to execute discovery commands on Linux targets.") | User credentials for AWS Systems Manager (SSM) Agent discovery on EC2 instances. Requires only a user name for the alternate user credential configured on the EC2 instance. | | [Azure Enterprise Agreement](https://www.servicenow.com/docs/access?context=r_CloudManagementCredentialsForm&version=australia&pubname=australia-platform-security&ft:locale=en-US) | Credentials for Azure Enterprise Agreement enrollments. | | Azure SAS | Credentials that use a shared access signature token for Azure storage access. | | [Azure Service Principal](https://www.servicenow.com/docs/access?context=r_CloudManagementCredentialsForm&version=australia&pubname=australia-platform-security&ft:locale=en-US) | Service principal credentials for Azure cloud discovery. Requires a tenant ID, client ID, and secret key from the Azure portal. | | [Azure SSH Certificate](https://www.servicenow.com/docs/N2Gi2HiGwHdSusUp1iLE8w "Discover Linux virtual machines on Azure using Service Principal (SP) with short-lived SSH certificates. Using these certificates circumvents the need for passwords or public and private key-pairs.") | SSH certificate credentials for discovering Azure Linux virtual machines. Requires a linked Azure Service Principal credential. | | [Cloud Management](https://www.servicenow.com/docs/access?context=r_CloudManagementCredentialsForm&version=australia&pubname=australia-platform-security&ft:locale=en-US) | General credentials for cloud management operations. | | [CloudFoundry](https://www.servicenow.com/docs/lVqDHZ~9eQe1v4c9otFeqw "The ServiceNow Discovery application finds Pivotal Cloud Foundry (PCF) version 3 components using the Pivotal Cloud Foundry pattern. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.") | Credentials for Cloud Foundry environments. | | [Google API](https://www.servicenow.com/docs/~zwd0NwtSWhgUGLZ0pqU1Q "Fill in the Google API Credentials form to configure the credentials.") | API credentials for Google Cloud services. | | Google Cloud | Credentials for discovering Google Cloud Platform resources. | | [IBM](https://www.servicenow.com/docs/ATcvrGcisIZwt8Xwh7GzVA "The ServiceNow Discovery application finds IBM Cloud Platform components (Softlayer API v3 and v3.1 and Bluemix API v2) using the IBM Cloud Platform patterns. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.") | Credentials for discovering IBM Cloud Platform resources. Requires a SoftLayer API user and key, or a Bluemix API key. | | [OpenStack](https://www.servicenow.com/docs/a2uyofNzLrM8w6GsYuQMew "The ServiceNow Discovery application uses OpenStack resource discovery patterns to find OpenStack resources through REST API calls. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.") | Credentials for OpenStack cloud environments. | | [Oracle API](https://www.servicenow.com/docs/SQ511VUJ1WvRnZvupznXcQ "Create Oracle API credentials on the ServiceNow AI Platform to enable access to your Oracle resources during Oracle discovery.") | API credentials for Oracle Cloud Infrastructure discovery. | | [oVirt](https://www.servicenow.com/docs/WaC~KGsITrSNqrTY4t8NtQ "The ServiceNow Discovery application uses patterns to find Oracle Linux Virtualization Manager (OLVM) and Red Hat Virtualization (RHV) components. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.") | Credentials for oVirt virtualization environments. | | [VMWare](https://www.servicenow.com/docs/qZ4OMDb8JjR6NsO~xnto3w "Applications that access VMware cloud resources need access to VMware credentials.") | Credentials for VMware vCenter cloud environments. | [ ] 4. Select Create new. 5. Complete the form. The fields in the form vary based on the credential type that you selected. The following fields appear in most credential types.{#create-cloud-credentials__table_lxx_t5x_bjc__entry__2} | Field | Description | |-|-| | Name | Enter a unique and descriptive name for the credential. | | User name | Enter the user name for this credential. Avoid leading or trailing spaces in user names. | | Active | Select this check box to make the credential available for Discovery. | | Credential alias | Select a credential alias to associate with this credential. Credential aliases enable you to define a credential once and reference it across multiple configurations. | | Order | Enter the sequence in which Discovery tries this credential when it attempts to log in to devices. The smaller the number, the higher the priority. If all credentials have the same order number, Discovery tries them in a random order. Note: Establish credential order when you use large numbers of credentials or when security policies lock out users after failed login attempts. | [ ] {#create-cloud-credentials__table_lxx_t5x_bjc} 6. Select Submit. You're returned to the Cloud credentials page. 7. To complete the setup, select Mark as configured. **Related topics** * [Get started with credentials](https://www.servicenow.com/docs/access?context=credentials-getting-started&version=australia&pubname=australia-platform-security&ft:locale=en-US) *[\>]: and then