Collect SOC 2 AWS IAM evidence to Google Sheets with Gmail alerts

by Mychel Garzon ✓ · 103 views · created 2026-04-27 · SecOps

What this workflow does

This workflow has 9 nodes and runs on a schedule (cron 0 0 1 */3 *). Along the way it connects AWS IAM, Google Sheets and Gmail.

How it runs

Trigger: On a schedule (cron 0 0 1 */3 *).

1. Set Audit Data (Code): runs custom JavaScript code
2. List IAM Users (AWS IAM): uses AWS IAM
3. Format User Evidence (Code): runs custom JavaScript code
4. Users Found? (If): checks a condition and branches into true / false
5. Export to Google Sheets (Google Sheets): append
6. Send Warning Email (Gmail): uses Gmail
7. Summarize Run (Code): runs custom JavaScript code
8. Send Success Email (Gmail): uses Gmail

Services it uses

AWS IAMGoogle SheetsGmail

Before you upgrade to n8n 3.0

Nodes used (6)

• Schedule Triggern8n-nodes-base.scheduleTrigger
• Coden8n-nodes-base.code
• AWS IAMn8n-nodes-base.awsIam
• Ifn8n-nodes-base.if
• Google Sheetsn8n-nodes-base.googleSheets
• Gmailn8n-nodes-base.gmail

From the author

Your automated compliance assistant that pulls, formats, and logs AWS infrastructure evidence to Google Sheets on a recurring schedule. Stop manually exporting IAM user lists and CloudTrail logs for your auditors. This workflow orchestrates the collection of…

View the original on n8n.io → Check your own copy