---
title: Set up your AWS Management Console for the AWS Inspector integration
description: Complete the following setup steps in your AWS Management Console environment before you install and configure the AWS Integration for Security Exposure Management Integration in your ServiceNow AI Platform instance.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/vulnerability-response/aws-inspector-setup.html
release: australia
product: Vulnerability Response
classification: vulnerability-response
topic_type: task
last_updated: "2026-04-02"
reading_time_minutes: 1
breadcrumb: [AWS Integration for Security Exposure Management, Vulnerability Response integrations, Vulnerability Response, Unified Security Exposure Management, Security Operations]
---

# Set up your AWS Management Console for the AWS Inspector integration

Complete the following setup steps in your AWS Management Console environment before you install and configure the AWS Integration for Security Exposure Management Integration in your ServiceNow AI Platform® instance.

## Before you begin

Role required: AWS account and credentials

## Procedure

1.  Navigate to the AWS Management Console and sign in.

2.  Navigate to **IAM \(Identity and Access Management\)**.

3.  Create an IAM user or use an existing IAM user with programmatic access.

4.  Attach the `AmazonInspector2ReadOnlyAccess` policy to the user or role to provide access to the Inspector List Findings v2 API.

5.  If you're using cross-account access, create an IAM role with a trust policy and note the Role ARN.

6.  Generate and securely store the Access Key ID and Secret Access Key.

    These credentials are required when you configure the AWS Integration for Security Exposure Management Integration in your ServiceNow AI Platform® instance.

    |Field|Description|
    |-----|-----------|
    |Access key|AWS access key ID for the IAM user.|
    |Secret Key|AWS secret access key \(encrypted\).|
    |Role ARN|ARN of the IAM role for STS AssumeRole.|
    |Region|AWS region\(s\) you want to import findings from.|

    **Note:**

    The integration uses AWS Signature Version 4 \(SigV4\) for request signing. When using Role ARN, the integration first calls AWS STS AssumeRole to obtain temporary security credentials \(valid for 3600 seconds\).