Automated AWS IAM key compromise response with Slack

The steps in the order they run, from what starts it.

1. 1🧠 Claude AI EngineLm Chat AnthropicModel
2. 2🔍 Manual Key Lookup TriggerManual triggerStarts it
3. 3📝 Secure Form: Key Compromise InputForm triggerStarts it
4. 4🤖 AI Security AnalysisAgentModel
5. 5🔍 AWS IAM ServiceAws IamService
6. 6🔧 Process Form SubmissionSetLogic
7. 7💬 Notify Security TeamSlackService
8. 8🔑 Fetch User Access KeysHttp RequestService
9. 9🔔 Request Human ApprovalSlackService
10. 10📊 Parse Access Key ResponseCodeLogic
11. 11✅ Approved Compromise DataSetLogic
12. 12⚡ No Operation, do nothingNo OpLogic
13. 13🛡️ Generate Invalidation PolicyHttp RequestService
14. 14🚫 Deactivate Compromised KeyHttp RequestService
15. 15🔀 Merge Response DataMergeLogic
16. 16📜 Audit Inline PoliciesHttp RequestService
17. 17🔍 Audit Attached PoliciesHttp RequestService
18. 18🔗 Apply Security PolicyHttp RequestService
19. 19📦 Aggregate Final ResultsAggregateLogic
20. 20📤 Extract Inline Policy NamesSplit OutLogic
21. 21📤 Extract Attached Policy ListSplit OutLogic
22. 22🔄 Batch Process Inline PoliciesSplit In BatchesLogic
23. 23🔄 Batch Process Attached PoliciesSplit In BatchesLogic
24. 24📜 Retrieve Inline Policy DetailsHttp RequestService
25. 25📋 Fetch Policy MetadataHttp RequestService
26. 26🔓 Parse Inline Policy JSONCodeLogic
27. 27📄 Retrieve Policy DocumentHttp RequestService
28. 28⚡ Inline Policy RouterNo OpLogic
29. 29🔓 Parse Attached Policy JSONCodeLogic
30. 30⚡ Attached Policy RouterNo OpLogic

Starts on

Someone submitting a form

Steps

30, 2 loops or waits

Size

Large: read it before trusting it with anything live

Connects to

Slack

Model

Claude