Exploring Cloud Configuration Governance

Understand the typical Cloud Configuration Governance workflow and high-level tasks.

To use Cloud Configuration Governance for managing the configuration of the cloud resources, perform the following tasks:

1. Install Cloud Configuration Governance. For more information, see Install Cloud Configuration Governance.
2. Install the CCG Content Pack to access the base system Cloud Configuration Governance contents. For more information, see Install the CCG Content Pack.
3. Assign Cloud Configuration Governance roles to users. For more information on the Cloud Configuration Governance roles, see Cloud Configuration Governance roles and system properties.
4. To manage the configuration of the Amazon Web Services (AWS) resources through Cloud Configuration Governance, see Set up Cloud Configuration Governance for AWS.
5. To manage the configuration of the Microsoft Azure resources through Cloud Configuration Governance, see Set up Cloud Configuration Governance for Microsoft Azure.
6. Create a scan configuration to scan the cloud resources against one or more policy sets and identify the policy violations. For more information, see Create a scan configuration.
7. Run the appropriate remediation action to fix the non-compliant cloud configuration identified during the scan run. For more information, see Run remediation.

• Install Cloud Configuration Governance
  You can install the Cloud Configuration Governance application (com.sn.itom.ccg) if you have the admin role. The application installs related ServiceNow® Store applications and plugins if they are not already installed.
• Install the CCG Content Pack
  You can install the CCG Content Pack application (sn_itom_ccg_cp) if you have the admin role.
• Set up Cloud Configuration Governance for AWS
  Set up access to the Amazon Web Services (AWS) cloud accounts in Cloud Configuration Governance to enable interaction between the application and the cloud. The application requires access to the cloud accounts to scan the cloud resources for non-compliant configurations and remediate them.
• Set up Cloud Configuration Governance for Microsoft Azure
  Set up access to the Microsoft Azure cloud accounts in Cloud Configuration Governance to enable interaction between the application and the cloud. The application requires access to the cloud accounts of your organization to scan the cloud resources for non-compliant configurations and remediate them.
• Domain separation and Cloud Configuration Governance
  Domain separation is not supported in Cloud Configuration Governance . Domain separation enables you to separate data, processes, and administrative tasks into logical groupings called domains. You can control several aspects of this separation, including which users can see and access data.