AWS events-driven discovery

concept australia Updated Oct 15, 2026 3 min read aws-events-driven-discovery.md
Raw file servicenow.com

Use AWS events-driven discovery to keep your CMDB current automatically when AWS resource configurations change, without waiting for a scheduled Discovery run.

How it works

[Omitted image "aws-events-driven-discovery.png"] Alt text: Overview of the AWS events-driven discovery

  1. AWS Config detects a change in the lifecycle state or configuration of a cloud resource.
  2. AWS Config sends a Simple Notification Service (SNS) notification to the ServiceNow Cloud Events REST API.
  3. The API writes the event to the Cloud Event [sn_cmp_cloud_event] table if it meets any of the following criteria:
    • The Type of the event is SubscriptionConfirmation.
    • The Type of the event is Notificationand messageType is ConfigurationItemChangeNotification.
    • Amazon CloudWatch raised the event for a tag change on a Configuration Item (CI).
  4. The Cloud Event Scheduler picks up events in the Ready state for batch processing and updates the affected resource in the CMDB. When response mappings are available, event-driven discovery uses them to update the CI. Otherwise, it triggers the appropriate Discovery pattern.

Requirements for AWS events-driven discovery

Before configuring AWS events-driven discovery, verify the following requirements are met:

  • The Discovery (com.snc.discovery) plugin is activated.
  • Valid AWS service accounts with associated logical datacenters are discovered.
  • Required roles: discovery_admin and sn_cmp.cloud_event_integration.
  • An AWS role with access to SNS, AWS Config, and the resource types you want to track.
  • Download the Cloud Discovery patterns spreadsheet so you can grant user permissions required for running the Discovery patterns. In addition to permissions, the spreadsheet also includes useful information such as pattern names, types, CI Classes, and links to vendor documentation. New patterns are available quarterly, so check periodically to be sure you have the latest version of the spreadsheet.

For setup instructions, see Configure AWS Config event notifications.

Configuration properties

Property

Description

sn_cmp.cloud_event.use_response_mapping_aws

Determines the CMDB update method. When set to True and suitable response mappings are available, event-driven discovery uses response mappings to create or update the CI in the CMDB. Otherwise, event-driven discovery triggers the appropriate Discovery pattern. - Type: Boolean

  • Default: true

sn_cmp.cloud_event.parallel_scheduler_count

Controls the number of Cloud Event Scheduler instances running in parallel. Increase this value to improve event processing rate when event inflow is high. For more information, see Scale the AWS cloud event schedulers. - Type: Integer

  • Default: 1

sn_cmp.error_events.default_domain

The sys_id of the service-provider domain. Set this property to limit the visibility of failed events to the service-provider administrator.- Type: String

  • Default: global
## Domain separation

During event processing, the Cloud Event Scheduler identifies the domain of the associated service account and assigns it to the event. If domain identification fails before processing, the event can remain unassigned and be visible across all domains. To limit the visibility of failed events to the service-provider administrator, set the sn_cmp.error_events.default_domain property to the sys_id of the service-provider domain.

Related topics

Configure AWS Config event notifications

Scale the AWS cloud event schedulers

Create a database index for the Cloud Events table

AWS discovery using patterns

AWS Events pattern-based discovery

Search documentation
Search document titles and file paths on the australia branch