Policy list for scanning cloud accounts
A list of default policies provided for scanning the cloud accounts.
Default policies for scan accounts
|
Policy Name |
Description |
|---|---|
|
Check AWS Discovery Schedule |
Verifies whether an AWS account has a discovery schedule attached. Running discovery regularly helps facilitate the identification and management of potential security risks. |
|
Check AWS Account Alias |
Verifies an AWS account has a unique alias to improve account management, reduce errors, and promote clarity and traceability within your AWS infrastructure. Note: Make sure you have API permission for iam: ListAccountAliases. |
|
Check AWS Account Owner Tag |
Verifies whether an AWS account has a designated owner to enhance accountability, streamline incident response, and facilitate communication within your AWS environment. |
|
Check AWS Custom Password Policy |
Verifies whether a custom password policy is set for every AWS account. A robust password requirement for all IAM users significantly increases the difficulty for attackers to crack passwords through brute-force attacks or credential theft attempts, ultimately enhancing the overall security of your AWS infrastructure.Note: Make sure you have API permission for iam: GetAccountPasswordPolicy. |
|
Check AWS Failed Certification |
Verifies the AWS account certification status. Failed certifications indicate potential security vulnerabilities because compromised credentials might not be deactivated promptly and provide a window of opportunity for attackers to exploit these weaknesses. |
|
Check AWS Pending Certification |
Verifies whether an AWS account certification is in a pending state to enable the prompt resolution of pending certifications and avoid potential security vulnerabilities. |
|
Check AWS Strong Password Policy |
Verifies whether an AWS account adheres to a strong password policy to promote security. This policy mandates robust password complexity requirements, significantly bolstering your AWS environment's defense against unauthorized access.Note: Make sure you have API permission for iam: GetAccountPasswordPolicy. |
|
Check Azure Discovery Schedule |
Verifies whether Azure account has a discovery schedule attached. This policy helps secure and up-to-date resource landscape to facilitate the identification and management of potential security risks. |
|
Check Azure Account Owner Tag |
Verifies if Azure account has a designated owner tag to enhance accountability and facilitate communication within your Azure environment. This policy readily identifies the responsible party for each account, promoting a culture of ownership and streamlined incident response. |
|
Check Azure Failed Certification |
Verifies Azure account certification status for failure to promote strong access control by proactively monitoring for any service account with a failed certification status. Failed certifications indicate potential security vulnerabilities, as compromised credentials might not be deactivated promptly. This policy minimizes the window of opportunity for attackers to exploit these weaknesses. |
|
Check Azure Pending Certification |
Verifies if Azure service account certification is in a pending state. This monitoring enables prompt resolution of pending certification and avoids potential security vulnerabilities. |
|
Check GCP Discovery Schedule |
Verifies whether GCP account has a discovery schedule attached. This policy helps secure and up-to-date resource landscape to facilitate the identification and management of potential security risks. |
|
Check GCP Account Owner Tag |
Verifies if GCP account has a designated owner tag to enhance accountability and facilitate communication within your GCP environment. This policy readily identifies the responsible party for each account, promoting a culture of ownership and streamlined incident response. |
|
Check GCP Failed Certification |
Verifies GCP account certification status for failure to promote strong access control by proactively monitoring for any service account with a failed certification status. Failed certifications indicate potential security vulnerabilities, as compromised credentials might not be deactivated promptly. This policy minimizes the window of opportunity for attackers to exploit these weaknesses. |
|
Check GCP Pending Certification |
Verifies if GCP account certification is in a pending state. This monitoring enables prompt resolution of pending certification and avoids potential security vulnerabilities. |
Parent Topic:Cloud Account Management reference
--- title: Policy list for scanning cloud accounts description: A list of default policies provided for scanning the cloud accounts. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/cloud-account-management/policies-for-scanning-cloud-accounts.html release: australia product: Cloud Account Management classification: cloud-account-management topic_type: reference last_updated: "2026-09-10" reading_time_minutes: 3 breadcrumb: [Reference, Cloud Account Management, ITOM Cloud Accelerate, IT Operations Management] --- # Policy list for scanning cloud accounts A list of default policies provided for scanning the cloud accounts. ## Default policies for scan accounts <table id="table_ard_jzj_gcc"><thead><tr><th> Policy Name </th><th> Description </th></tr></thead><tbody><tr><td> Check AWS Discovery Schedule </td><td> Verifies whether an AWS account has a discovery schedule attached. Running discovery regularly helps facilitate the identification and management of potential security risks. </td></tr><tr><td> Check AWS Account Alias </td><td> Verifies an AWS account has a unique alias to improve account management, reduce errors, and promote clarity and traceability within your AWS infrastructure. **Note:** Make sure you have API permission for iam: ListAccountAliases. </td></tr><tr><td> Check AWS Account Owner Tag </td><td> Verifies whether an AWS account has a designated owner to enhance accountability, streamline incident response, and facilitate communication within your AWS environment. </td></tr><tr><td> Check AWS Custom Password Policy </td><td> Verifies whether a custom password policy is set for every AWS account. A robust password requirement for all IAM users significantly increases the difficulty for attackers to crack passwords through brute-force attacks or credential theft attempts, ultimately enhancing the overall security of your AWS infrastructure.**Note:** Make sure you have API permission for iam: GetAccountPasswordPolicy. </td></tr><tr><td> Check AWS Failed Certification </td><td> Verifies the AWS account certification status. Failed certifications indicate potential security vulnerabilities because compromised credentials might not be deactivated promptly and provide a window of opportunity for attackers to exploit these weaknesses. </td></tr><tr><td> Check AWS Pending Certification </td><td> Verifies whether an AWS account certification is in a pending state to enable the prompt resolution of pending certifications and avoid potential security vulnerabilities. </td></tr><tr><td> Check AWS Strong Password Policy </td><td> Verifies whether an AWS account adheres to a strong password policy to promote security. This policy mandates robust password complexity requirements, significantly bolstering your AWS environment's defense against unauthorized access.**Note:** Make sure you have API permission for iam: GetAccountPasswordPolicy. </td></tr><tr><td> Check Azure Discovery Schedule </td><td> Verifies whether Azure account has a discovery schedule attached. This policy helps secure and up-to-date resource landscape to facilitate the identification and management of potential security risks. </td></tr><tr><td> Check Azure Account Owner Tag </td><td> Verifies if Azure account has a designated owner tag to enhance accountability and facilitate communication within your Azure environment. This policy readily identifies the responsible party for each account, promoting a culture of ownership and streamlined incident response. </td></tr><tr><td> Check Azure Failed Certification </td><td> Verifies Azure account certification status for failure to promote strong access control by proactively monitoring for any service account with a failed certification status. Failed certifications indicate potential security vulnerabilities, as compromised credentials might not be deactivated promptly. This policy minimizes the window of opportunity for attackers to exploit these weaknesses. </td></tr><tr><td> Check Azure Pending Certification </td><td> Verifies if Azure service account certification is in a pending state. This monitoring enables prompt resolution of pending certification and avoids potential security vulnerabilities. </td></tr><tr><td> Check GCP Discovery Schedule </td><td> Verifies whether GCP account has a discovery schedule attached. This policy helps secure and up-to-date resource landscape to facilitate the identification and management of potential security risks. </td></tr><tr><td> Check GCP Account Owner Tag </td><td> Verifies if GCP account has a designated owner tag to enhance accountability and facilitate communication within your GCP environment. This policy readily identifies the responsible party for each account, promoting a culture of ownership and streamlined incident response. </td></tr><tr><td> Check GCP Failed Certification </td><td> Verifies GCP account certification status for failure to promote strong access control by proactively monitoring for any service account with a failed certification status. Failed certifications indicate potential security vulnerabilities, as compromised credentials might not be deactivated promptly. This policy minimizes the window of opportunity for attackers to exploit these weaknesses. </td></tr><tr><td> Check GCP Pending Certification </td><td> Verifies if GCP account certification is in a pending state. This monitoring enables prompt resolution of pending certification and avoids potential security vulnerabilities. </td></tr></tbody> </table>To return to the procedure, see [Set up scan configuration for data visualization](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/cloud-account-management/set-up-data-visualization.md). **Parent Topic:**[Cloud Account Management reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/cloud-account-management/cam-reference.md)
| title | Policy list for scanning cloud accounts |
| description | A list of default policies provided for scanning the cloud accounts. |
| locale | en-US |
| canonical_url | https://www.servicenow.com/docs/r/australia/it-operations-management/cloud-account-management/policies-for-scanning-cloud-accounts.html |
| release | australia |
| product | Cloud Account Management |
| classification | cloud-account-management |
| topic_type | reference |
| last_updated | 2026-09-10 |
| reading_time_minutes | 3 |
| breadcrumb | ReferenceCloud Account ManagementITOM Cloud AccelerateIT Operations Management |