OneCloud lets your people order, run and change cloud services across AWS, Azure, Google Cloud and Oracle Cloud from ServiceNow, under the approvals, change requests and policies you already use. Everyone sees the cost before and after, and every resource stays on record from the day it's built to the day it's removed.
Most companies now run more than one cloud, and each one comes with its own console, its own request route and its own idea of who's allowed to do what. Nobody has one view of what's running, who asked for it, what state it's in or what it costs.
OneCloud gives you that view in ServiceNow. Every deployment, resource, request and cost across all your clouds and accounts sits in one place, filtered by cloud, account, region, environment, owner group or customer. It's a scoped Store application that uses the platform as it is and ships its own catalog category, topics and records instead of touching yours.
People order from the portal they already use, such as Employee Center. They pick a cloud account, a size and an owner group on a short form, with their own networks in pick lists and the monthly price in view. OneCloud works out exactly what will be built, checks it, asks for approval and a change where your rules say so, builds it, records it in the CMDB and tells them it's ready.
Afterwards each deployment offers the actions that fit it, per server or for the whole deployment, now or at a time they pick. Operators get the same actions in the workspace, and integrations get them through the REST API.
ServiceNow keeps the request, the approval, the change and the record. A MID Server in your own network does the work in the cloud, connecting out to your instance with no inbound ports.
Rules run before anyone is asked to approve, so a compliant development server goes straight through and a risky change stops with a reason. How OneCloud governs without slowing people down.
Before. OneCloud keeps a price book of the clouds' published list prices, loaded in the background for the regions you use, so the order form never waits on a cloud API. Before approval the exact resources are priced again, and approvers see that figure.
After. Once a deployment runs, OneCloud reads its cost from the cloud's own cost data, matched by the tag it puts on every resource. Each deployment gets a cost card, each requester sees their spend in My cloud, and everyone sees amounts in their own currency.
Ordered versus actual. Cost and usage shows month to date and forecast, spend by cloud, the estimate next to what was spent, hours saved by schedules, saving opportunities, unusual spend and tag coverage. How cost works.
Works with or without domain separation. Single company customers never see any of it. OneCloud for MSPs.
See it on your own clouds. A short demo with your accounts, your approval rules and your CMDB.
Request a demoEvery resource is written to the CMDB through the Identification and Reconciliation Engine, in the standard classes and related to its region. Where you run ITOM Discovery, a targeted discovery confirms it straight after the build. On removal every configuration item is retired, so nothing is left behind.
One trail per deployment or run: who ordered it with which inputs, which policies passed or were overridden, who approved, which change covered it and what was done in the cloud. Print it or export CSV or JSON. Secret values never appear in it.
Point OneCloud at a folder in GitHub, GitLab, Azure DevOps or Bitbucket and it creates a catalog item per template, with questions, sections and pick lists. It looks after the state, and a template change becomes a pull request your team reviews. How it works.
OneCloud uses Terraform to build and change resources, so your infrastructure code stays the source of truth.
The setup assistant opens each form already filled in and ticks steps off when it sees them done. Manual steps are kept to the ones the platform or your network needs.
ServiceNow is preparing Cloud Provisioning and Governance and Cloud Services Catalog for deprecation. OneCloud keeps everything in ServiceNow: the same catalog, approvals and Change, the same CMDB, and your templates as they are. It has no runtime dependency on either product.
The importer starts with a dry run that only writes a report. You then bring across everything or one part at a time, all switched off until you turn it on. Replay runs past CPG decisions through the imported policies, running stacks are adopted with their state, and CPG keeps running until the last one has moved. Read how the move works, or see our CPG and CSC replacement service.
OneCloud is a ServiceNow Store application for multi and hybrid cloud self-service and governance. It gives you one place to order, track and manage cloud services across AWS, Azure, Google Cloud and Oracle Cloud, with requesters working in the Employee Center they already use. Every order and every change after it runs under the approvals, change requests and policies you already use in ServiceNow, the cost is shown before and after, and every resource is recorded in the CMDB.
Microsoft Azure, AWS, Google Cloud and Oracle Cloud, with the same features on each. Containers are covered too: AKS, EKS, GKE, OKE, Amazon ECS and Azure Container Instances, with actions that fit them, such as scaling a node pool or upgrading Kubernetes.
Start, stop and restart servers, resize them, add or expand disks, open or close ports, set business hours schedules, extend a lease, update to a newer version of the template and remove the deployment. Each action follows the approval and change rules the process owner sets.
The order form shows a monthly estimate at list prices as the requester picks a size, from a price book OneCloud keeps up to date in the background, so ordering never waits on a cloud API. The plan is priced again before approval. Once a deployment runs, OneCloud reads its actual cost from the cloud's own cost data and shows it on the deployment, in My cloud and in the Cost and usage dashboards, in each person's own currency.
Yes. Policies written in Rego run in Open Policy Agent before anyone is asked to approve. A rule can stop the request, warn, or stop it until an administrator overrides it with a reason that is kept on the record. Price limits hold an order above a monthly amount for approval, and nobody can approve their own request.
Yes. Each customer gets its own cloud accounts, catalogue and view, with or without domain separation. Price plans, contracted prices and price limits put the customer's price on the order form and the approval, the month is rated against the real cloud bill and reconciled, and the result exports to your invoicing system. Emails, Teams and Slack messages are branded per customer. Single company customers never see any of this.
It works with or without it. OneCloud records every resource it builds in the CMDB through IRE. Where you run Discovery, OneCloud starts a targeted discovery after each build so the new resources are confirmed by the platform as well.
Terraform. Open source Terraform or OpenTofu on a MID Server in your own network, or HCP Terraform and Terraform Enterprise if you already use them, with Azure DevOps pipelines for day 2 work where you have them. Templates come from GitHub, GitLab, Azure DevOps or Bitbucket, and OneCloud creates the catalog items and looks after the state for you.
In the platform's own credential store, or in HashiCorp Vault. They are read on the MID Server at run time for that run only, and never written to logs, command lines or instance tables.
The setup assistant asks six questions, then shows only the steps your answers need, opens each platform form already filled in and ticks steps off when it sees them done. A host preparation script readies the MID Server, and a bootstrap script adds a cloud account in one go. Most of the time goes on collecting credentials.
We actively support the current ServiceNow family release and the two before it. The Store listing and the release notes name the families for each OneCloud release.
No. OneCloud is built on core ServiceNow platform capabilities: Employee Center and the Service Catalog, Flow Designer, the MID Server, the CMDB and IRE, and Change. It doesn't call CPG, Cloud Services Catalog or the Cloud API at run time. For customers who run CPG today, OneCloud includes an importer that brings accounts, policies, scripts, templates and running stacks across.
A short demo on your own instance setup: your clouds, your approval rules and your CMDB. Or write to us at info@intelibliss.com.
