--- title: Create cloud credentials description: Create cloud credentials to manage access to cloud-based applications, including Amazon Web Services, Microsoft Azure, and Google Cloud. Discovery uses these credentials to connect to your cloud provider accounts and discover cloud resources. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/discovery/create-cloud-credentials.html release: australia product: Discovery classification: discovery topic_type: task last_updated: "2026-04-28" reading_time_minutes: 5 keywords: [ITOM, user roles, Now Assist] breadcrumb: [ITOM Configuration Console, Discovery setup, Configuring Discovery, Discovery, ITOM Visibility, IT Operations Management] --- # Create cloud credentials Create cloud credentials to manage access to cloud-based applications, including Amazon Web Services, Microsoft Azure, and Google Cloud. Discovery uses these credentials to connect to your cloud provider accounts and discover cloud resources. ## Before you begin Verify the following: - You're using the Zurich Patch 8 or later version of the ServiceNow AI Platform. - You have installed the ITOM Visibility plugin. For more information, see [Install ITOM Visibility using ServiceNow Otto for Setup](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/itom-visibility/install-nowassist-setup-itom-visibility.md). - You have installed the ServiceNow Otto for IT Operations Management \(ITOM\) plugin. For more information, see [Install ServiceNow Otto for ITOM](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/install-na-itom.md). - You're on the Configure IT Operations Management page of the Configuration Console. For more information, see [Access the ITOM Configuration Console](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/access-itom-config-console-disco.md). Role required: discovery\_admin ## About this task Cloud credentials store the authentication information that Discovery needs to access your cloud provider accounts. Before you create cloud credentials, verify that you have the required access and permissions configured in your cloud provider environment. The specific configuration requirements vary by cloud provider. For more information about cloud provider setup and permissions, see [Discovery for cloud environment](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/cloud-discovery-wizard.md). ## Procedure 1. Navigate to **Configuration Summary** > **Discovery** > **Discovery Setup**. 2. Select **Cloud credentials**. 3. From the **Credential type** drop-down list, select a credential type. The following credential types are available for Cloud credentials. |Credential type|Description| |---------------|-----------| |[Alibaba Cloud API](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/create-alibaba-cloud-api-credentials.md)|API credentials for discovering Alibaba Cloud resources. Requires an AccessKey ID and AccessKey secret from the Alibaba Cloud Console.| |[AWS](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/r_CloudManagementCredentialsForm.md)|Credentials for discovering Amazon Web Services cloud resources.| |[AWS SSM Instance User](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/configure-custom-user-credentials.md)|User credentials for AWS Systems Manager \(SSM\) Agent discovery on EC2 instances. Requires only a user name for the alternate user credential configured on the EC2 instance.| |[Azure Enterprise Agreement](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/r_CloudManagementCredentialsForm.md)|Credentials for Azure Enterprise Agreement enrollments.| |Azure SAS|Credentials that use a shared access signature token for Azure storage access.| |[Azure Service Principal](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/r_CloudManagementCredentialsForm.md)|Service principal credentials for Azure cloud discovery. Requires a tenant ID, client ID, and secret key from the Azure portal.| |[Azure SSH Certificate](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/azure-cloud-disc-ssh.md)|SSH certificate credentials for discovering Azure Linux virtual machines. Requires a linked Azure Service Principal credential.| |[Cloud Management](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/r_CloudManagementCredentialsForm.md)|General credentials for cloud management operations.| |[CloudFoundry](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery-and-service-mapping-patterns/pivotal-cloud-foundry.md)|Credentials for Cloud Foundry environments.| |[Google API](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/google-api-credentials-form.md)|API credentials for Google Cloud services.| |Google Cloud|Credentials for discovering Google Cloud Platform resources.| |[IBM](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery-and-service-mapping-patterns/ibm-cloud-platform-discovery.md)|Credentials for discovering IBM Cloud Platform resources. Requires a SoftLayer API user and key, or a Bluemix API key.| |[OpenStack](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery-and-service-mapping-patterns/openstack-discovery.md)|Credentials for OpenStack cloud environments.| |[Oracle API](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/create-oracle-api-credentials.md)|API credentials for Oracle Cloud Infrastructure discovery.| |[oVirt](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery-and-service-mapping-patterns/red-hat-virtualization-discovery.md)|Credentials for oVirt virtualization environments.| |[VMWare](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/discovery/vmware-cloud-discovery.md)|Credentials for VMware vCenter cloud environments.| 4. Select **Create new**. 5. Complete the form. The fields in the form vary based on the credential type that you selected. The following fields appear in most credential types.
Field Description
Name Enter a unique and descriptive name for the credential.
User name Enter the user name for this credential. Avoid leading or trailing spaces in user names.
Active Select this check box to make the credential available for Discovery.
Credential alias Select a credential alias to associate with this credential. Credential aliases enable you to define a credential once and reference it across multiple configurations.
Order Enter the sequence in which Discovery tries this credential when it attempts to log in to devices. The smaller the number, the higher the priority. If all credentials have the same order number, Discovery tries them in a random order.**Note:** Establish credential order when you use large numbers of credentials or when security policies lock out users after failed login attempts.
6. Select **Submit**. You're returned to the Cloud credentials page. 7. To complete the setup, select **Mark as configured**. **Related topics** [Get started with credentials](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-security/credentials-getting-started.md)