Azure DNS zones and record sets discovery using Patterns
Summarize
Summary of Azure DNS zones and record sets discovery using Patterns
The Discovery and Service Mapping Patterns application in ServiceNow includes specific patterns—Azure - DNS Zones (LP) and Azure - DNS Zone Recordsets (LP)—to discover Azure Domain Name System (DNS) zones and their corresponding record sets. This discovery populates the ServiceNow CMDB with detailed DNS configuration data, enabling better visibility and management of Azure DNS resources.
Show less
To effectively use these patterns, customers may need to update to the latest version of the Discovery and Service Mapping Patterns app available on the ServiceNow Store, as new patterns are released quarterly.
Prerequisites
- Privileges: Assign a user the API Management Service Reader role in the Microsoft Azure Console.
- Credentials: Create Azure Service Principal credentials and configure a ServiceNow cloud account for Azure.
- Discovery Schedule: Set up a discovery schedule for the Azure service accounts in the Cloud Discovery Workspace.
- Permissions: Verify REST API permissions by referencing the Cloud Discovery patterns spreadsheet, which outlines required user permissions and provides pattern metadata.
Data Collected by Discovery
Running these Azure DNS discovery patterns populates DNS-related CIs in the CMDB with key attributes:
- DNS Zone [cmdbcidnszone]: Includes zone name, number of record sets, operational and install status, state, and comments.
- DNS Alias [cmdbcidnsalias]: Captures alias name, IP address, operational status, comments, and unique identifiers combining service account ID and DNS zone name.
- DNS Name [cmdbcidnsname]: Includes DNS record name, operational status, comments, and unique identifiers.
Configuration Item (CI) Relationships
To provide a clear representation of Azure DNS resources, the discovery patterns establish relationships between CIs such as:
- Resource Group contains DNS Zones
- DNS Zone contains DNS Names and DNS Aliases
- DNS Names use DNS Aliases
These relationships support comprehensive tracking and impact analysis of DNS configurations within the CMDB.
The Discovery and Service Mapping Patterns application uses the Azure - DNS Zones (LP) and Azure - DNS Zone Recordsets (LP) Patterns to discover Azure Domain Name System (DNS) definitions (zones and their respective record sets). Discovering some of these resources may require updating to the latest version of the Discovery and Service Mapping Patterns application from the ServiceNow Store.
Request apps on the Store
Visit the ServiceNow Store website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the ServiceNow Store version history release notes.
To learn about Azure DNS zones and record sets and their version that you can discovery, refer to Detailed information on products discovered by ITOM Visibility.
For more information on Azure cloud discovery, see Discovery for Microsoft Azure Cloud.
Prerequisites
- Verify privileges
- On the Microsoft Azure Console, provide a user with the API Management Service Reader role.
- Create Azure Service Principal credentials
- For more information see: Create Azure cloud credentials.
- Configure Azure service account
- For more information, see Set up a cloud account for Azure.
- Create discovery schedule
- Create a schedule for the relevant Azure service accounts. For more information, see Create a discovery schedule in Cloud Discovery Workspace.
Verify the REST API Permissions
Download the Cloud Discovery patterns spreadsheet so you can grant user permissions required for running the Discovery patterns. In addition to permissions, the spreadsheet also includes useful information such as pattern names, types, CI Classes, and links to vendor documentation. New patterns are available quarterly, so check periodically to be sure you have the latest version of the spreadsheet.
Data collected by Discovery during horizontal discovery
Discovery populates the data in the CMDB when running the Azure - DNS Zones (LP) and Azure - DNS Zone Recordsets (LP) Patterns.
- Resources discovered by the Azure - DNS Zones (LP) pattern
Table 1. DNS Zone [cmdb_ci_dns_zone] Field Description Name [name] The name of the DNS Zone. Number Of RecordSets [number_of_recordsets] The number of the recordsets defined within the DNS Zone. Operational status [operational_status] The operational status of the DNS Zone. State [state] The state of the DNS Zone. Install Status [install_status] The install status of the DNS Zone. Comments [comments] The field for general comments. - Resources discovered by the Azure - DNS Zone Recordsets (LP) pattern
Table 2. DNS Alias [cmdb_ci_dns_alias] Field Description Name [name] The name of the DNS alias record. IP Address [ip_address] IP address of the DNS alias record. Comments [comments] Unique identifier for an Azure DNS zone combining service account ID, DNS zone name, and a fixed hash suffix. Operational status [operational_status] The operational status of the DNS alias record. Table 3. DNS Name [cmdb_ci_dns_name] Field Description Name [name] The name of the DNS Name record. Operational status [operational_status] The operational status of the DNS record. Comments [comments] Unique identifier for an Azure DNS zone combining service account ID, DNS zone name, and a fixed hash suffix.
CI relationships
| CI | Relationship | CI |
|---|---|---|
| Resource Group [cmdb_ci_resource_group] | Contains::Contained by | DNS Zone [cmdb_ci_dns_zone] |
| CI | Relationship | CI |
|---|---|---|
| DNS Zone [cmdb_ci_dns_zone] | Contains::Contained by | DNS Name [cmdb_ci_dns_name] |
| DNS Zone [cmdb_ci_dns_zone] | Contains::Contained by | DNS Alias [cmdb_ci_dns_alias] |
| DNS Name [cmdb_ci_dns_name] | Used by::Uses | DNS Alias [cmdb_ci_dns_alias] |