---
sourceDocument: Xanadu Create Integrations with Applications
sourceDocumentLink: https://www.servicenow.com/docs/r/xanadu/integrate-applications

 Release :

    - xanadu

ft:locale :

    - en-US

ft:publication_title :

    - Xanadu Create Integrations with Applications

ft:clusterId :

    - crint

bundleId :

    - crint

workflow :

    - Creator


---

# AWS IAM Spoke

# AWS IAM Spoke {#ariaid-title1}

* Release version: Xanadu
* 
* Updated August 1, 2024
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read

Integrate ServiceNow instance with AWS IAM
to manage access to AWS services and resources securely. Manage groups, policies, and roles in
AWS IAM from your ServiceNow instance.

## Request apps on the Store {#aws-iam-spoke__section_xcf_3df_mjb}

Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/bundle/store-release-notes/page/release-notes/store/sn-store-release-notes.html).{#aws-iam-spoke__inline-send-to-store}

## Integration Hub subscription {#aws-iam-spoke__section_rsf_yvb_l3b}

This spoke requires an Integration Hub subscription. For more information, see [Legal schedules - IntegrationHub overview](https://www.servicenow.com/content/dam/servicenow-assets/public/en-us/doc-type/legal/snc-addendum-integrationhub.pdf).

## Spoke version {#aws-iam-spoke__section_sxv_3bv_bsb}

AWS IAM spoke v1.1.0 is the latest version.{#aws-iam-spoke__iam-ver}

## Supported version {#aws-iam-spoke__section_b5j_flt_pkb}

This spoke was built for API version 2010-05-08, but may be compatible with later versions.  
Note:  
If you use different API version, ensure that you change the API version in all spoke actions.

## Spoke requirements {#aws-iam-spoke__section_g1j_zlt_pkb}

* User with full access to IAM.
* Access Key ID and Secret Access Key of the user. Record these values for later use.

{#aws-iam-spoke__ul_pvn_3f5_pkb}For more information about creating user in IAM and providing the required access, see [AWS
Identity and Access Management Documentation](https://docs.aws.amazon.com/iam/index.html) site.

## Spoke subflows {#aws-iam-spoke__section_bms_rzq_hlb}

The Jenkins spoke provides sample subflows to demonstrate automating AWS IAM tasks. Available subflows are:{#aws-iam-spoke__table_yvq_zzq_hlb__entry__2}

| Subflow | Description |
|-|-|
| Delete Group | Deletes the specified AWS IAM group. |
| Delete User | Deletes the specified AWS IAM user. |
| Delete Policy | Deletes the specified policy from the AWS IAM account. |
[ ]

{#aws-iam-spoke__table_yvq_zzq_hlb}

## Spoke actions {#aws-iam-spoke__section_t31_1mt_pkb}

The AWS IAM spoke provides actions to automate AWS IAM tasks when events occur in ServiceNow. Available actions include:{#aws-iam-spoke__table_sfw_b4t_pkb__entry__3}

| Category | Action | Description |
|-|-|-|
| Group Management | Add User to Group | Adds user to a group in AWS IAM. |
| Group Management | Create Group | Creates a group in AWS IAM. |
| Group Management | Delete Group | Deletes a group in AWS IAM. |
| Group Management | Look up Group | Searches for the required group in AWS IAM. |
| Group Management | Look up Group Users | Lists all the users in the required group. |
| Group Management | Remove User from Group | Removes a user from a group in AWS IAM. |
| Group Policy Management | Attach Inline Policy in Group | Adds or updates an inline policy document embedded in the specified IAM group. |
| Group Policy Management | Attach Policy to Group | Attaches the specified managed policy to the required IAM group. |
| Group Policy Management | Detach Inline Policy from Group | Deletes the specified inline policy from the specified AWS IAM group |
| Group Policy Management | Detach Policy from Group | Detaches the specified managed policy from the required IAM group. |
| Group Policy Management | Look up Attached Group Policies | Retrieves the list of all policies attached to the IAM group. |
| Group Policy Management | Look up Group Policies | Retrieves all the inline policies of the specified group. If none exists, the operation returns an empty list |
| Policy Management | Create Policy | Creates managed policy in the specified IAM group. |
| Policy Management | Delete Policy | Deletes specified Policy from AWS IAM. |
| Policy Management | Detach Policy from Roles | Detaches the specified managed policy from the specified IAM Role. |
| Policy Management | Look up Entities for Policy | Lists all entities (Users, Group, and Roles) attached to this policy. |
| User Management | Create User | Creates a user in AWS IAM. |
| User Management | Deactivate MFA Device | Deactivates the required MFA device attached to a user. |
| User Management | Delete Access Key for User | Deletes the access key of the AWS IAM user. |
| User Management | Delete Login Profile | Deletes the password for the specified IAM user, which terminates the user's ability to access AWS services through the AWS Management Console. |
| User Management | Delete Service Specific Credential | Deletes the required service-specific credential. |
| User Management | Delete Signing Certificate | Deletes a signing certificate associated with the specified IAM user. |
| User Management | Delete SSH Public Key | Deletes the specified SSH public key. |
| User Management | Delete User | Deletes the required IAM User. |
| User Management | Delete Virtual MFA Device by User | Deletes the specified Virtual MFA device. |
| User Management | Detach Policy from User | Detaches the specified managed policy from the specified IAM role. |
| User Management | Look up User | Searches for the required user in the AWS IAM. |
| User Management | Look up Access Keys by User | Lists the access key of the AWS IAM user. |
| User Management | Look up Groups for User | Retrieves the list of all the groups, a particular user belongs to. |
| User Management | Look up Inline User Policies | Retrieves all the inline policies of the specified IAM user. If none exists, the operation returns an empty list. |
| User Management | Look up MFA Devices by User | Retrieves information about the MFA services associated with the specified IAM user. If none exists, the operation returns an empty list. |
| User Management | Look up Service Specific Credentials | Retrieves information about the service-specific credentials associated with the specified IAM user. |
| User Management | Look up Signing Certificates by User | Retrieves information about the signing certificates associated with the specified IAM user. If none exists, the operation returns an empty list. |
| User Management | Look up SSH Public Keys by User | Retrieves information about the SSH public keys associated with the specified IAM user. If none exists, the operation returns an empty list. |
| User Policy Management | Attach Policy to User | Attaches the specified managed policy to the specified user. |
|   | Delete Inline User Policy | Deletes an inline policy attached to the user. |
|   | Look up Attached User Policies | Retrieves all the attached policies of the user. |
| Role Management | Look up Roles | Retrieves list of all roles. |
[ ]

{#aws-iam-spoke__table_sfw_b4t_pkb}

## Connection and credential alias requirements {#aws-iam-spoke__section_jbq_hvk_5jb}

Integration Hub uses aliases to manage connection and credential information, and OAuth credentials. Using an alias eliminates the need to configure multiple credentials and connection information
profiles when using multiple environments. If the connection or credential information changes, you don't need to update any actions that use the connection.

For information about setting up the spoke, see
[Set up the AWS IAM spoke](https://www.servicenow.com/docs/kmk9be_GAzA3xsIQH8lBDA#setup-aws-iam "Integrate the ServiceNow instance and AWS IAM using AWS credential to authenticate ServiceNow requests.").