---
sourceDocument: Brazil IT Operations Management
sourceDocumentLink: https://www.servicenow.com/docs/r/it-operations-management

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# AWS web ACL

# AWS web ACL pattern-based discovery {#ariaid-title1}

Release version: Brazil  
Updated June 16, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Discovery and Service Mapping Patterns finds AWS web access control lists (web ACLs) on your cloud environment. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.
Note:  
Security Operations users can leverage the integration with Discovery to import web ACL rules and load balancers with attached web ACLs. For more information on setting ACL rules and using the Mitigation Controls Monitoring app, see [Configure the AWS WAF integration for mitigation controls monitoring](https://www.servicenow.com/docs/access?context=spc-install-config-aws-waf&version=brazil&pubname=brazil-security-management&ft:locale=en-US).

## AWS web ACL data model {#aws-web-acl-pattern__section_lw2_gtn_skc}

The Amazon AWS - Web ACL (LP) pattern introduces the following CI class that extends an existing CMDB class.  
{#aws-web-acl-pattern__table_extends_webacl__entry__2}

| CI class | Extends from |
|-|-|
| Web ACL \[cmdb_ci_web_acl\] | Virtual Machine Object \[cmdb_ci_vm_object\] |
[Table 1. CI class introduced by this pattern]

{#aws-web-acl-pattern__table_extends_webacl}

## Pattern-based discovery and mapping requirements {#aws-web-acl-pattern__section_rpj_fj2_bgc}

Verify the AWS discovery prerequisites
:   For more information, see the prerequisites section in [AWS discovery using patterns](https://www.servicenow.com/docs/Y0yjdHKR~_I76hi21l9C4A "Discovery and Service Mapping Patterns uses patterns to discover components of the Amazon AWS Cloud deployment during horizontal discovery. Discovering some of these resources might require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.").

Configure the Discovery schedule to support GovCloud
:   Discovering AWS GovCloud (US) accounts requires using a datacenter URL when setting up an AWS service account. For more information, see [Create AWS service accounts](https://www.servicenow.com/docs/AzWp20Be9IzaYIP2IRkfmg "Create AWS service accounts on the ServiceNow AI Platform to access your AWS account during AWS discovery.").

## Data collected by Discovery during horizontal discovery {#aws-web-acl-pattern__section_ggp_ql2_bgc}

Discovery populates the data in the CMDB when running the Amazon AWS - Web ACL (LP) pattern.  
{#aws-web-acl-pattern__table_cmdb_ci_web_acl__entry__2}

| Field | Description |
|-|-|
| Name \[name\] | Name of the web ACL. |
| Object ID \[object_id\] | Unique ID for the web ACL from AWS. |
| Description \[short_description\] | Description of the web ACL provided by AWS. |
| Default Action \[default_action\] | Default action when no rules in the web ACL match. The value is allow or deny. |
[Table 2. Web ACL \[cmdb_ci_web_acl\]]

{#aws-web-acl-pattern__table_cmdb_ci_web_acl}  
Note:  
Security Operations users can leverage the integration with Discovery to import web ACL rules and load balancers with attached web ACLs. For more information on setting ACL rules and using the Mitigation Controls Monitoring app, see [Configure the AWS WAF integration for mitigation controls monitoring](https://www.servicenow.com/docs/access?context=spc-install-config-aws-waf&version=brazil&pubname=brazil-security-management&ft:locale=en-US).

## CI relationships {#aws-web-acl-pattern__section_dc4_ghc_dgc}

The Amazon AWS - Web ACL (LP) pattern creates the following relationships to support Amazon AWS Web ACL discovery.  
{#aws-web-acl-pattern__table_relationships__entry__3}

| CI | Relationship | CI |
|-|-|-|
| Web ACL \[cmdb_ci_web_acl\] | Hosted on::Hosts | AWS Datacenter \[cmdb_ci_aws_datacenter\] |
[Table 3. CI relationships]

{#aws-web-acl-pattern__table_relationships}