Brazil, Australia, Zurich Patch 12, Zurich, Yokohama Patch 4, Yokohama
Integration
The Service Graph Connector for Wiz is a fast lane to cloud security value.
Wiz employs agentless, read-only scanning via API to get visibility to your cloud including AWS, Azure, and the Google Cloud Platform, to which it adds industry-leading security insights.
The ServiceNow Service Graph Connector for Wiz harvests those details and insights, harmonizes them with other sources of cloud data, and makes all that intelligence accessible to our trusted workflows for incident response and service management, IT operations, and Security Operations.
- Ingests Wiz data, standardized and aligned with ServiceNow’s Common Service Data Model (CSDM), to enable outcomes across Incident, Change, Operations, Security, Asset Management and many others
- Works with minimal credentials and a streamlined setup process
- Captures public cloud instances and resources from AWS, Azure, and GCP
- Pulls Container information for AWS and Azure, as well as Kubernetes data
- Leverages CMDB 360 to track data from multiple cloud capture options and reconcile the differences
- Work with data on Virtual Machines, Servers and Data centres for complete control over your environment
New
- The Append object ID suffix to server name connection property is enabled by default. This property controls whether the Wiz object ID is appended to server names to keep Server CIs unique.
- The Exclude Representative Resources connection property is deactivated by default. This property controls whether Wiz representative resources are imported into the CMDB. Representative resources are standardized placeholder assets with synthetic identifiers.
Changed
- The ingestion of AWS VM scale set members now uses the isEphemeral flag, along with the aws:autoscaling:groupName tag, to identify and skip ephemeral VMs.
- Added the Global attribute to the Region class for Load Balancer and Network Interface, aligning Google resource relationships with SG-GCP.
Fixed
- Duplicate Server CI creation caused by inconsistent naming across connectors can now be prevented by activating Dynamic IRE for the Hardware class and deactivating the Append object ID suffix to server name connection property.
- Duplicate or placeholder CI creation from Wiz representative resources can now be prevented by enabling the Exclude Representative Resources connection property, which stops these resources from being imported into the CMDB. Note: In some Wiz configurations, all Kubernetes pods are handled as representative resources, so no Pods are ingested when this property is enabled.
- Updated the Cloud Function object_id mapping to remove the cloudfunctions.googleapis.com prefix, so that CIs reconcile with SG-GCP and ServiceNow Discovery.
Not applicable for this application version.
Licensing:
- com.snc.itom.discovery.license
- com.snc.itom.license
Usage of this Service Graph Connector requires a subscription to one of the following SKUs:
- Subscription Unit based ITOM Visibility
- Subscription Unit based ITOM Discovery