AWS Network ACL pattern-based discovery

  • Release version: Australia
  • Updated June 3, 2026
  • 1 minute to read

    • Discovery and Service Mapping Patterns finds AWS Network access control lists (ACLs) on your cloud environment. Discovering some of these resources may require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

    Pattern-based discovery and mapping requirements

    Verify the AWS discovery prerequisites
    For more information, see the prerequisites section in AWS discovery using patterns.
    Configure the Discovery schedule to support GovCloud
    Discovering AWS GovCloud (US) accounts requires using a datacenter URL when setting up an AWS service account. For more information, see Create AWS service accounts.

    Data collected by Discovery during horizontal discovery

    Discovery populates the data in the CMDB when running the Amazon AWS - ACL (LP) pattern.

    Table 1. Network ACL [cmdb_ci_network_acl]
    Field Description
    Name [name] Name of the network ACL.
    Object ID [object_id] Unique identifier, allocated by AWS for this resource.
    Table 2. ACL Endpoint [cmdb_ci_endpoint_acl]
    Field Description
    Name [name] Name of the endpoint.
    Object ID [object_id] Unique identifier, allocated by AWS for this resource.

    CI relationships

    The Amazon AWS - ACL (LP) pattern creates the following relationships and references to support AWS Network ACL discovery. References link to records in other tables and don't appear in the CI Relationship [cmdb_rel_ci] table.

    Table 3. CI relationships
    CI Relationship CI
    Network ACL [cmdb_ci_network_acl] Hosted on::Hosts AWS Datacenter [cmdb_ci_aws_datacenter]
    Cloud Network [cmdb_ci_network] Contains::Contained by Network ACL [cmdb_ci_network_acl]
    Network ACL [cmdb_ci_network_acl] Implement End Point To::Implement End Point From ACL Endpoint [cmdb_ci_endpoint_acl]
    Cloud Subnet [cmdb_ci_cloud_subnet] Use End Point To::Use End Point From ACL Endpoint [cmdb_ci_endpoint_acl]