Create a serverless schedule for Amazon ECS discovery
Create a serverless schedule to discover Amazon Elastic Container Service (Amazon ECS) and Amazon Elastic Container Registry (ECR) resources in a standalone discovery.
Before you begin
Verify you have an AWS service account ID and have created AWS credentials. For more information, see the prerequisites section in Amazon ECS resource discovery with Patterns.
Role required: discovery_admin
About this task
Discovering ECR resources requires running the Amazon AWS - ECS pattern before using Aqua Trivy to scan container images. To discover only ECS and ECR resources without performing a full AWS pattern discovery, create a serverless discovery schedule using the Amazon AWS - ECS pattern.
Procedure
Navigate to All > Discovery > Discovery Schedules.
Create the discovery schedule record.
Select New.
On the form, fill in the fields.
Field Description Name Unique name for this discovery schedule. Discover Scan type, which should be Serverless. MID server Name of the MID Server to use for this schedule. Active Enables this schedule for discovery. Run Determines the run schedule of the discovery. Select Submit.
Create the execution pattern.
In the Discovery Schedules page, select the record you created.
In the Serverless Execution Patterns tab, select New.
On the form, fill in the fields.
Field Description Name Descriptive name for this record. Pattern Pattern to be used for this schedule, which should be Amazon AWS - ECS. Proxy Host Fully qualified domain name of the machine on which you're installing the proxy server, which should be Global. Active Enables this schedule for discovery. Select Submit.
Set the pattern launcher parameters.
In the Discovery Pattern Launcher Parameters tab, select the record you created.
On the form, fill in the fields.
Parameter Value cloud_account_id AWS cloud service account ID. cloud_cred_id Sys_id of the AWS credentials you created on the ServiceNow AI Platform. cloud_datacenter_type Name of the AWS Datacenter table, which should be cmdb_ci_aws_datacenter. Select Submit.
What to do next
Either execute discovery immediately by selecting Discover now or wait until the predefined schedule triggers the discovery.
Parent Topic:AWS discovery using patterns
Related topics