Assess AWS security posture changes with Claude and Slack alerts
Needs changesNeeds changes. This template uses 1 thing(s) that n8n 3.0 removes: AI Agent v1 (old agent modes). 1 breaking item(s) found. Static check, last run 2026-10-19.
What this workflow does
This AI workflow has 24 nodes and runs on a schedule (every day) (plus 1 other trigger). Along the way it connects Anthropic Chat Model and Slack.
How it runs
Trigger: On a schedule (every day) (plus 1 other trigger).
- Set AWS Configurations (Edit Fields (Set)): sets 11 fields: awsAccountId, awsRegion, securityFindingsApiUrl…
- Get Security Findings (HTTP Request): calls an HTTP API
- Compare Security Snapshots (Code): runs custom JavaScript code
- Check Findings Change (If): checks a condition and branches into true / false
- Get Asset Inventory (HTTP Request): calls an HTTP API
- Combine Findings with Assets (Code): runs custom JavaScript code
- Impact Analysis AI Agent (AI Agent): runs an AI agent, with model: Claude AI Security Model
- Analyze Security Impact (Code): runs custom JavaScript code
- Route Based on Risk (Switch): routes items into 1 branches
- Await Security Lead Approval (Wait): pauses before continuing
…plus 10 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
1 thing in this workflow is removed in n8n 3.0. Fix it before you upgrade:
- AI Agent v1 (old agent modes) in Impact Analysis AI Agent (v1.6): replace with Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent.
Rather not rewrite it? Many of these flows can be rebuilt in Make (free plan).
| Removed in 3.0 | Replace with |
|---|---|
| AI Agent v1 (old agent modes) Impact Analysis AI Agent (v1.6) | Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent. |
Nodes used (13)
- Schedule Trigger
n8n-nodes-base.scheduleTrigger - Manual Trigger
n8n-nodes-base.manualTrigger - Edit Fields (Set)
n8n-nodes-base.set - HTTP Request
n8n-nodes-base.httpRequest - Code
n8n-nodes-base.code - If
n8n-nodes-base.if - No Operation, do nothing
n8n-nodes-base.noOp - AI Agent
@n8n/n8n-nodes-langchain.agent - Anthropic Chat Model
@n8n/n8n-nodes-langchain.lmChatAnthropic - Switch
n8n-nodes-base.switch - Wait
n8n-nodes-base.wait - Slack
n8n-nodes-base.slack - Send Email
n8n-nodes-base.emailSend
From the author
Quick overview This workflow polls or manually checks AWS security findings via HTTP endpoints, compares them to a stored baseline, enriches changes with asset inventory data, uses Anthropic Claude to assess severity and compliance impact, and then routes…