Triage AWS security posture changes with Claude, Slack, email, and WhatsApp alerts
Needs changesNeeds changes. This template uses 1 thing(s) that n8n 3.0 removes: AI Agent v1 (old agent modes). 1 breaking item(s) found. Static check, last run 2026-10-19.
What this workflow does
This AI workflow has 28 nodes and runs on a schedule (every day) (plus 1 other trigger). Along the way it connects Anthropic Chat Model, Slack and WhatsApp Business Cloud.
How it runs
Trigger: On a schedule (every day) (plus 1 other trigger).
- Set AWS Configuration Params (Edit Fields (Set)): sets 10 fields: awsAccountId, awsRegion, anthropicModel…
- Wait: pauses before continuing
- Simulate Security Findings Data (Code): runs custom JavaScript code
- Identify Changes in Findings (Code): runs custom JavaScript code
- Check Changes in Findings (If): checks a condition and branches into true / false
- Simulate Asset Inventory Data (Code): runs custom JavaScript code
- Merge Security and Asset Details (Code): runs custom JavaScript code
- Wait: pauses before continuing
- Analyze Security Impact (AI Agent): runs an AI agent, with model: Claude Model for Security Analysis
- Evaluate Security Analysis Results (Code): runs custom JavaScript code
…plus 14 more steps. See the full node list below.
Services it uses
Before you upgrade to n8n 3.0
1 thing in this workflow is removed in n8n 3.0. Fix it before you upgrade:
- AI Agent v1 (old agent modes) in Analyze Security Impact (v1.6): replace with Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent.
Rather not rewrite it? Many of these flows can be rebuilt in Make (free plan).
| Removed in 3.0 | Replace with |
|---|---|
| AI Agent v1 (old agent modes) Analyze Security Impact (v1.6) | Latest AI Agent node (Tools Agent). For SQL Agent, use a Postgres or MySQL tool with a recent AI Agent. |
Nodes used (13)
- Schedule Trigger
n8n-nodes-base.scheduleTrigger - Manual Trigger
n8n-nodes-base.manualTrigger - Edit Fields (Set)
n8n-nodes-base.set - Wait
n8n-nodes-base.wait - Code
n8n-nodes-base.code - If
n8n-nodes-base.if - No Operation, do nothing
n8n-nodes-base.noOp - AI Agent
@n8n/n8n-nodes-langchain.agent - Anthropic Chat Model
@n8n/n8n-nodes-langchain.lmChatAnthropic - Switch
n8n-nodes-base.switch - Slack
n8n-nodes-base.slack - Send Email
n8n-nodes-base.emailSend - WhatsApp Business Cloud
n8n-nodes-base.whatsApp
From the author
Quick overview Automated AWS security posture triage: detects changes in security findings, enriches with asset context, uses Claude to assess risk severity, then routes critical cases for manager approval while alerting SecOps, Compliance, and stakeholders…