Automation library · Alerts and monitoring

Assess AWS security posture changes with Claude and Slack

Started by a clock, and works across Email and Slack. It hands the judgement calls to Claude. 24 steps, 3 branches, 1 loop or waits: large, and worth reading before you trust it with anything live.

LargeCalls a model: Claude

24 stepsLarge: read it before trusting it with anything live
3Branches: places the flow splits
1Loop or waits
2Services it connects to

The flow

Starts it 2Model 2Logic 11Service 9

The steps in the order they run, from what starts it.

  1. 1Scheduled Polling TriggerSchedule triggerStarts it
  2. 2Manual Testing TriggerManual triggerStarts it
  3. 3Claude AI Security ModelLm Chat AnthropicModel
  4. 4Set AWS ConfigurationsSetLogic
  5. 5Impact Analysis AI AgentAgentModel
  6. 6Get Security FindingsHttp RequestService
  7. 7Analyze Security ImpactCodeLogic
  8. 8Compare Security SnapshotsCodeLogic
  9. 9Route Based on RiskSwitchLogic
  10. 10Check Findings ChangeIfLogic
  11. 11Await Security Lead ApprovalWaitLogic
  12. 12Notify Slack for Risk ReviewSlackService
  13. 13Get Asset InventoryHttp RequestService
  14. 14Terminate ProcessNo OpLogic
  15. 15Verify Approval StatusIfLogic
  16. 16Amend Security PostureHttp RequestService
  17. 17Combine Findings with AssetsCodeLogic
  18. 18Mark Status RejectedSetLogic
  19. 19Record Compliance AuditHttp RequestService
  20. 20Alert Slack Rejection NoticeSlackService
  21. 21Alert SecOps on SlackSlackService
  22. 22Alert Compliance on SlackSlackService
  23. 23Send Security Summary EmailEmail SendService
  24. 24Save Security Baseline DataCodeLogic

How it's built

Starts on
A clock
Steps
24, with 3 branches, 1 loop or waits
Size
Large: read it before trusting it with anything live
Connects to
Email, Slack
Model
Claude

Questions

What does it need to run?

An n8n account, plus your own Email and Slack accounts, and a key for Claude. You connect your own accounts after importing it; none are included.

What starts it?

It starts on a clock.

Does it use AI?

Yes. It calls Claude. Model calls are billed by the provider, not by n8n.

How long does it take to set up?

Take your time. At 24 steps it is large: read it before trusting it with anything live.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

Before you run it

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 24 steps before you point it at anything that matters.