| \n\nConnection Details\n\n |
| \n\nConnection Alias\n\n | \n\nName to identify the AWS connection record. For example, `SG_AWS_CredentialAlias_Org`. You can add multiple AWS instances. However, don’t modify the name for the default connection alias `SG_AWS_CredentialAlias_Org`.\n\n |
| \n\nOrganization Details\n\n |
| \n\nOrganization Account\n\n | \n\nNumeric account identifier of the AWS organization.\n\n |
| \n\nOrganization Name\n\n | \n\nName of the AWS organization.\n\n |
| \n\nOrganization Description\n\n | \n\nDescription of the AWS organization.\n\n |
| \n\nAWS Regions\n\n |
| \n\nRegions\n\n | \n\nAWS regions to collect the CI data.By default, the Service Graph Connector for AWS runs through all the AWS regions to collect the CI data.\n\nYou can enter AWS specific regions to speed up the CI data import process. For example, `us-east1, us-east-2`.\n\nIf this field is left empty, the Service Graph Connector for AWS pulls the resources from all the AWS regions.\n\nHowever, for the AWS GovCloud regions, don’t leave the **Regions** field empty. The supported AWS GovCloud regions are `us-gov-east-1` and `us-gov-west-1`.\n\nIf you update the **Regions** field value later, clear the value of the **Last run datetime** field in all the data sources related to the Service Graph Connector for AWS to import a new set of data.\n\n |
| \n\nSTS Assume Role Name\n\n |
| \n\nSTS Role\n\n | \n\nAWS Identity and Access Management \\(IAM\\) role name that is obtained by the ServiceNow user by calling the AssumeRole API offered by the AWS Security Token Service \\(STS\\). The AssumeRole API returns a set of temporary security credentials for the ServiceNow user to access the AWS resources.**Note:** Enter the IAM role name but don’t prefix `arn` in the name. If you leave this field is empty, the value of this field is automatically set to **SnowOrganizationAccountAccessRole**, which is the default IAM role name for the ServiceNow user.\n\n |
| \n\nS3 Account Details\n\n |
| \n\nS3 Account Id\n\n | \n\nNumeric identifier of the AWS account that hosts the Amazon Simple Storage Service \\(Amazon S3\\) bucket.\n\n |
| \n\nS3 Bucket Name\n\n | \n\nName of the Amazon S3 bucket that collects the details from Amazon EC2 instances.\n\n |
| \n\nS3 Region\n\n | \n\nRegion where the Amazon S3 bucket resides.\n\n |
| \n\nSSM SendCommand Document Details\n\n |
| \n\nSSM Send Command Linux Name\n\n | \n\nName of the document that defines the actions run by the AWS Systems Manager \\(SSM\\) on a Linux-based Amazon EC2 instance.\n\n |
| \n\nSSM Send Command Windows Name\n\n | \n\nName of the document that defines the actions run by the AWS SSM on a Windows-based Amazon EC2 instance.\n\n |
| \n\nManagement Account ID\n\n |
| \n\nManagement Account ID\n\n | \n\nManagement account in the AWS organization. The account calls the ListAccounts API associated with the AWS organization to collect CI information from all the accounts. For more information, see [ListAccounts](https://docs.aws.amazon.com/organizations/latest/APIReference/API_ListAccounts.html) on the AWS documentation site.Enter a value for this field when the ServiceNow user was created in an AWS member account.\n\n |
| \n\nStandalone Account ID Details\n\n |
| \n\nStandalone Account ID\n\n | \n\nID of a member account in the AWS organization.**Note:** When specifying a standalone account, AWS organization-related data such as the organization name, organization units, organization ID, and service accounts are not imported. If you want to import the full data later, clear any value mentioned in the **Standalone Account ID** field. See the [Service Graph Connector for AWS - Standalone Setup \\[KB1642159\\]](https://hi.service-now.com/kb_view.do?sysparm_article=KB1642159) article in the Now Support Knowledge Base.\n\n |
| \n\nAWS Config Aggregator Details\n\n |
| \n\nConfig Aggregator Account\n\n | \n\nAWS account where the aggregator resource type in the AWS Config service has been configured.Enter a value in this field when you’re using an AWS Config aggregator.\n\n |
| \n\nConfig Aggregator Name\n\n | \n\nName of the aggregator resource type. This field is available only when you enter a value in the **Config Aggregator Account** field.\n\n |
| \n\nConfig Aggregator Region\n\n | \n\nRegion where the aggregator resource type resides. This field is available only when you enter a value in the **Config Aggregator Account** field.\n\n |
| \n\nAWS Key Rotation Setup\n\n |
| \n\nAWS Rotate Keys\n\n | \n\nOption to enable the key rotation process.\n\n |
| \n\nAWS Key Rotation Date\n\n | \n\nKey rotation date. Set the value to the required key rotation date for the first run. For subsequent runs, this field is automatically set to the rotation date. This field is available only when you select the **AWS Rotate Keys** check box.\n\n |
| \n\nAWS Key Rotation Period \\(in Days\\)\n\n | \n\nKey rotation period in days. This field is available only when you select the **AWS Rotate Keys** check box.\n\n |
| \n\nAWS Key Rotation Status\n\n | \n\nStatus message of a key rotation displaying whether the rotation was a success or a failure. This field is automatically set to display the key rotation status message. This field is available only when you select the **AWS Rotate Keys** check box. If the rotation status is a failure, an email notification is triggered, if configured.\n\n |
| \n\nEmail accounts for receiving error notifications\n\n | \n\nComma-separated list of the email addresses of recipients who receive notifications about the AWS key rotation errors.\n\n |
| \n\nEmail account groups for receiving error notifications\n\n | \n\nComma-separated list of the ServiceNow groups who receive notifications about the AWS key rotation errors.\n\n |
| \n\nGov Cloud Setup\n\n |
| \n\nIs Gov Cloud\n\n | \n\nOption to indicate that the connection setup is for the AWS GovCloud.\n\n |
| \n\nSSM EKS SendCommand Document Details\n\n |
| \n\nEKS Cluster Names Document\n\n | \n\nName of the AWS SSM document to discover EKS clusters associated with EC2 Bastion hosts.\n\n |
| \n\nEKS Shell Script Document\n\n | \n\nName of the AWS SSM document to fetch CIs related to Kubernetes components, such as pods, services, and deployments, from EKS clusters.\n\n |
\n