Triage AWS security misconfigurations with GPT-4.1 Mini and send alerts to Gmail
Ready for 3.0Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.
What this workflow does
This AI workflow has 10 nodes and runs when an HTTP POST request hits its webhook URL. Along the way it connects Gmail, OpenAI and Airtable.
How it runs
Trigger: When an HTTP POST request hits its webhook URL.
- SNS Handler (Code): runs custom JavaScript code
- If: checks a condition and branches into true / false
- SNS Confirm (HTTP Request): calls an HTTP API
- Normalize Finding (Code): runs custom JavaScript code
- Edit Fields (Edit Fields (Set)): sets 1 field: resp
- AI Prioritizer (OpenAI): uses OpenAI
- Airtable: create or update
- Send a message (Gmail): uses Gmail
- Edit Fields (Edit Fields (Set)): sets or maps fields
Services it uses
Before you upgrade to n8n 3.0
Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.
Nodes used (8)
- Webhook
n8n-nodes-base.webhook - Code
n8n-nodes-base.code - Gmail
n8n-nodes-base.gmail - OpenAI
@n8n/n8n-nodes-langchain.openAi - Airtable
n8n-nodes-base.airtable - Edit Fields (Set)
n8n-nodes-base.set - If
n8n-nodes-base.if - HTTP Request
n8n-nodes-base.httpRequest
From the author
What this workflow does Automatically triages risky AWS misconfigurations and alerts your team. Pipeline: Security Hub or AWS Config -> EventBridge rules -> SNS (HTTP) -> n8n Webhook -> Normalize -> AI Prioritizer -> Airtable (log) ->…