Create an AI connection for Amazon (v1.21.)

Create an AI connection for Amazon in AI Control Tower using the AI Service Graph Connector for Amazon (version 1.2.1).

Before you begin

Role required: sn_ai_disc.discovery_admin and sn_cmdb_int_util.sgc_admin

Procedure

1. Navigate to Al Control Tower > Configurations > AI connections.

2. Click Add.

3. Select AWS from the available connectors.

4. Click Create connection.

5. Review setup instructions page displays.

   Note: Verify to follow all the prerequisite steps.

6. Select Download basic scripts.

   Note: Download the basic scripts and select the check box.

7. Select Continue.

   Setup page appears.

8. Select Source systems.

9. Choose the AWS services that you want to integrate with ServiceNow.

   • Amazon Bedrock
   • Amazon Bedrock AgentCore
   • Amazon SageMaker
   • Select Submit.

10. Configure Amazon Bedrock

    1. Enter the Connection Name

    2. Enter the Access Key ID

    3. Enter the Secret Access Key

       The Access keys are long-term credentials for an IAM user or the AWS account root user. Access keys consist of two parts: an access key ID and a secret access key. For detailed information, see how to get access and secret key.

    4. Enter the AWS Region.

       Note: The region information is available in the navigation bar of the AWS management console and this can be a comma separated field. So, you can enter multiple regions.

    5. Enter the Management Account ID

       Note: The Management Account ID applies in two scenarios:

       • Your IAM user is created in a Designated Member account.
       • You need Organizational-level access.
         1. Enter the Standalone Account ID

       Note: This step is optional. Provide a single account ID to test discovery against that account before enabling full Organization discovery.

    6. Enter the STS Assume Role

       The role assumed for discovery.

    7. Select Update and test connection

    8. Select Continue

11. Configure Bedrock import schedule

    1. Open a parent schedule import

    2. Select the Active check box

    3. Select Run according to your preference

    4. To run frequency by demand, select Execute Now.

       Note: This is an optional step as the schedule imports run according to the schedule.

    5. Click Continue

12. Configure CloudWatch logs for Bedrock

    1. Enter the Connection Name

    2. Enter the Access Key.

    3. Enter the Secret Key.

    4. Enter the AWS Region.

    5. Enter the Log Group Names

    6. Select Create and test connection

    7. Select Continue.

13. Configure CloudWatch logs import schedule for Bedrock

    1. Open a parent schedule import.

    2. Select the Active check box.

    3. Select Run according to your preference

    4. To run frequency by demand, select Execute Now.

       Note: This is an optional step as the schedule imports run according to the schedule.

    5. Select Continue

14. Configure SageMaker

    1. Enter the Connection Name

    2. Enter the Access Key ID

    3. Enter the Secret Access Key

    4. Enter the AWS Region

    5. Select Create and test connection

    6. Select Continue

15. Configure SageMaker import schedule

    1. Open a parent schedule import

    2. Select the Active check box

    3. Select Run according to your preference

    4. To run frequency by demand, select Execute Now.

       Note: This is an optional step as the schedule imports run according to the schedule.

    5. Select Continue

16. Configure CloudWatch monitoring for SageMaker

    1. Enter the Connection Name

    2. Enter the Access Key

    3. Enter the Secret Key

    4. Enter the AWS Region

    5. Select Create and test connection

    6. Select Continue

17. Configure CloudWatch monitoring import schedules for SageMaker

    1. Open a parent schedule import

    2. Select Active check box

    3. Select Run according to your preference

    4. To run frequency by demand, select Execute Now.

       Note: This is an optional step as the schedule imports run according to the schedule.

    5. Select Continue

18. Select the Confirm connection setup activity to verify whether the connection was configured.

Result

Click View all connections to view the newly created connection.

The AI connection for AWS is created and configured.