AWS Integration for Security Exposure Management

  • Release version: Zurich
  • Updated April 2, 2026
  • 1 minute to read

    • Configure the integrations that are included with the AWS Integration for Security Exposure Management application to import the data that you want.

    Before you begin

    Role required: sn_vul_aws.configure_integration

    Procedure

    1. Navigate to All > AWS Integration for Security Exposure Management > Configurations.
    2. On the AWS Configurations page select the record for the integration that you want to configure.
    3. For AWS Inspector fill in the fields.
      Table 1. AWS Inspector
      Field Description
      Integration type Select AWS Inspector.
      Integration instance Name of your ServiceNow AI Platform® instance that you want to use.
      Access key Access key you generated in Set up your AWS Management Console for the AWS Inspector integration.
      Secret key Encrypted Secret key from Set up your AWS Management Console for the AWS Inspector integration.
      AWS region AWS region(s) you want to import findings from.
      Role ARN IAM role with a trust policy you noted from Set up your AWS Management Console for the AWS Inspector integration.
    4. On the Host and Container Vulnerabilities tabs fill in the fields.
    5. For AWS Security Hub fill in the fields.
      Table 2. AWS Security Hub
      Integration type Select AWS Security Hub.
      Integration instance Name of your ServiceNow AI Platform® instance that you want to use.
      Access key Access key you generated in Set up your AWS Management Console for the AWS Inspector integration.
      Secret key Encrypted Secret key from Set up your AWS Management Console for the AWS Inspector integration.
      AWS region AWS region(s) you want to import findings from.
      Role ARN IAM role with a trust policy you noted from Set up your AWS Management Console for the AWS Inspector integration.
    6. On the Host, Container, and Test Results tabs fill in the fields.
    7. Navigate to All > AWS Integration Security Exposure Management > Integrations.
    8. Select an integration record and review the Schedule tab to set the run schedule.
      See Integration sequence and frequency details to help you set the schedules and run sequences.
    9. Alternatively, select Execute Now to run an integration on-demand.
      The integration runs daily and retrieves findings from the configured regions. To verify the import results, navigate to All > AWS Integration > Administration > Integrations. Select an integration and select the Vulnerability Integration Runs tab on the record to review the run status.