AWS Network ACL pattern-based discovery

Discovery and Service Mapping Patterns finds AWS Network access control lists (ACLs) on your cloud environment. Discovering some of these resources may require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.

Pattern-based discovery and mapping requirements

Verify the AWS discovery prerequisites

For more information, see the prerequisites section in AWS discovery using patterns.

Configure the Discovery schedule to support GovCloud

Discovering AWS GovCloud (US) accounts requires using a datacenter URL when setting up an AWS service account. For more information, see Create AWS service accounts.

Data collected by Discovery during horizontal discovery

Discovery populates the data in the CMDB when running the Amazon AWS - ACL (LP) pattern.

Table 1. Network ACL [cmdb_ci_network_acl]

Field	Description
Name [name]	Name of the network ACL.
Object ID [object_id]	Unique identifier, allocated by AWS for this resource.

Table 2. ACL Endpoint [cmdb_ci_endpoint_acl]

Field	Description
Name [name]	Name of the endpoint.
Object ID [object_id]	Unique identifier, allocated by AWS for this resource.

CI relationships

The Amazon AWS - ACL (LP) pattern creates the following relationships and references to support AWS Network ACL discovery. References link to records in other tables and don't appear in the CI Relationship [cmdb_rel_ci] table.

Table 3. CI relationships

CI	Relationship	CI
Network ACL [cmdb_ci_network_acl]	Hosted on::Hosts	AWS Datacenter [cmdb_ci_aws_datacenter]
Cloud Network [cmdb_ci_network]	Contains::Contained by	Network ACL [cmdb_ci_network_acl]
Network ACL [cmdb_ci_network_acl]	Implement End Point To::Implement End Point From	ACL Endpoint [cmdb_ci_endpoint_acl]
Cloud Subnet [cmdb_ci_cloud_subnet]	Use End Point To::Use End Point From	ACL Endpoint [cmdb_ci_endpoint_acl]