Skip to content
AWS Integration for Security Exposure Management › Vulnerability Response integrations › Vulnerability Response › Unified Security Exposure Management › Security Operations
Release: Australia · Updated: 2026-04-02 · Official documentation · View source

Set up your AWS Management Console for the AWS Inspector integration

Complete the following setup steps in your AWS Management Console environment before you install and configure the AWS Integration for Security Exposure Management Integration in your ServiceNow AI Platform® instance.

Before you begin

Role required: AWS account and credentials

Procedure

  1. Navigate to the AWS Management Console and sign in.

  2. Navigate to IAM (Identity and Access Management).

  3. Create an IAM user or use an existing IAM user with programmatic access.

  4. Attach the AmazonInspector2ReadOnlyAccess policy to the user or role to provide access to the Inspector List Findings v2 API.

  5. If you're using cross-account access, create an IAM role with a trust policy and note the Role ARN.

  6. Generate and securely store the Access Key ID and Secret Access Key.

    These credentials are required when you configure the AWS Integration for Security Exposure Management Integration in your ServiceNow AI Platform® instance.

    FieldDescription
    Access keyAWS access key ID for the IAM user.
    Secret KeyAWS secret access key (encrypted).
    Role ARNARN of the IAM role for STS AssumeRole.
    RegionAWS region(s) you want to import findings from.

    Note:

    The integration uses AWS Signature Version 4 (SigV4) for request signing. When using Role ARN, the integration first calls AWS STS AssumeRole to obtain temporary security credentials (valid for 3600 seconds).