AWS IAM访问密钥轮换提醒自动化工作流
中级
这是一个SecOps, Multimodal AI领域的自动化工作流,包含 14 个节点。主要使用 If, Slack, AwsIam, Filter, HttpRequest 等节点。 为超过365天的AWS IAM访问密钥发送Slack警报
前置要求
- •Slack Bot Token 或 Webhook URL
- •AWS Access Key 和 Secret
- •可能需要目标 API 的认证凭证
工作流预览
可视化展示节点连接关系,支持缩放和平移
导出工作流
复制以下 JSON 配置到 n8n 导入,即可使用此工作流
{
"id": "Q0EjgXk8j2ygOvy5",
"meta": {
"instanceId": "4a2e6764ba7a6bc9890d9225f4b21d570ce88fc9bd57549c89057fcee58fed0f",
"templateCredsSetupCompleted": true
},
"name": "AWS IAM 访问密钥轮换提醒自动化工作流",
"tags": [
{
"id": "hvp6nueQ4hpIJWbY",
"name": "aws",
"createdAt": "2025-08-17T05:47:27.209Z",
"updatedAt": "2025-08-17T05:47:27.209Z"
}
],
"nodes": [
{
"id": "77d5914f-44dd-4267-be75-f960f477702d",
"name": "每周调度器",
"type": "n8n-nodes-base.scheduleTrigger",
"position": [
-448,
16
],
"parameters": {
"rule": {
"interval": [
{
"field": "weeks"
}
]
}
},
"typeVersion": 1.2
},
{
"id": "e0c92177-d85f-45c1-b0a6-bcb7e9b424e1",
"name": "获取多个用户",
"type": "n8n-nodes-base.awsIam",
"position": [
-224,
16
],
"parameters": {
"returnAll": true,
"requestOptions": {},
"additionalFields": {}
},
"credentials": {
"aws": {
"id": "d62669OP9bvnmE4n",
"name": "us-east-1"
}
},
"typeVersion": 1
},
{
"id": "d019ce1c-ce14-42df-856a-fc9dcaaf533f",
"name": "无操作,不执行任何操作",
"type": "n8n-nodes-base.noOp",
"position": [
672,
112
],
"parameters": {},
"typeVersion": 1
},
{
"id": "f0b5101b-e521-45d9-9d93-9bcffa3a1702",
"name": "发送消息",
"type": "n8n-nodes-base.slack",
"position": [
672,
-80
],
"webhookId": "7c4ae1f3-4589-484f-b55e-0e74b920044a",
"parameters": {
"text": "=:warning: Access key for {{ $json.ListAccessKeysResponse.ListAccessKeysResult.AccessKeyMetadata[0].UserName }} is {{ $json.ListAccessKeysResponse.ListAccessKeysResult.AccessKeyMetadata[0].CreateDate.toDateTime('s').diffTo($now, 'days').ceil().abs() }} days old — rotate soon.",
"user": {
"__rl": true,
"mode": "list",
"value": "U054RMBTVBM",
"cachedResultName": "trung.tran"
},
"select": "user",
"otherOptions": {},
"authentication": "oAuth2"
},
"credentials": {
"slackOAuth2Api": {
"id": "4JSKt9sIRV1KGswQ",
"name": "Slack account"
}
},
"typeVersion": 2.3
},
{
"id": "7b14679e-4c0d-42bc-904f-41c8f2e3d957",
"name": "便签",
"type": "n8n-nodes-base.stickyNote",
"position": [
-1536,
-592
],
"parameters": {
"width": 976,
"height": 1008,
"content": "# AWS IAM 访问密钥轮换提醒自动化工作流"
},
"typeVersion": 1
},
{
"id": "9234cd35-9728-47de-96c8-1eb5c4ffb354",
"name": "便签 1",
"type": "n8n-nodes-base.stickyNote",
"position": [
-512,
-144
],
"parameters": {
"height": 112,
"content": "### 1. 调度工作流"
},
"typeVersion": 1
},
{
"id": "9d2fff11-c252-45f8-af8b-e18761fed2a6",
"name": "便签 2",
"type": "n8n-nodes-base.stickyNote",
"position": [
-208,
192
],
"parameters": {
"width": 304,
"height": 112,
"content": ""
},
"typeVersion": 1
},
{
"id": "e5535511-2750-45dd-bd7b-1daf18d41842",
"name": "便签 3",
"type": "n8n-nodes-base.stickyNote",
"position": [
112,
-144
],
"parameters": {
"width": 256,
"height": 96,
"content": "### 3. 过滤密钥"
},
"typeVersion": 1
},
{
"id": "9714750e-365f-40fb-a917-7dfbce8d1803",
"name": "便签 4",
"type": "n8n-nodes-base.stickyNote",
"position": [
336,
208
],
"parameters": {
"height": 112,
"content": "### 4. 检查密钥时效"
},
"typeVersion": 1
},
{
"id": "bee26e8e-3f62-44e0-abf1-2a42b293ae75",
"name": "便签7",
"type": "n8n-nodes-base.stickyNote",
"position": [
896,
-64
],
"parameters": {
"width": 528,
"height": 112,
"content": ""
},
"typeVersion": 1
},
{
"id": "ccbe9813-0aa1-410c-b389-abe678fa1d25",
"name": "获取用户访问密钥",
"type": "n8n-nodes-base.httpRequest",
"position": [
0,
16
],
"parameters": {
"url": "=https://iam.amazonaws.com/?Action=ListAccessKeys&UserName={{ $json.UserName }}&Version=2010-05-08",
"options": {},
"authentication": "predefinedCredentialType",
"nodeCredentialType": "aws"
},
"credentials": {
"aws": {
"id": "d62669OP9bvnmE4n",
"name": "us-east-1"
}
},
"typeVersion": 4.2
},
{
"id": "60809479-ea5c-4446-aa70-5c6d841d09ea",
"name": "过滤非活跃密钥",
"type": "n8n-nodes-base.filter",
"position": [
224,
16
],
"parameters": {
"options": {},
"conditions": {
"options": {
"version": 2,
"leftValue": "",
"caseSensitive": true,
"typeValidation": "strict"
},
"combinator": "and",
"conditions": [
{
"id": "2853872a-825b-4f59-8b4b-358cac8b197b",
"operator": {
"type": "string",
"operation": "equals"
},
"leftValue": "={{ $json.ListAccessKeysResponse.ListAccessKeysResult.AccessKeyMetadata[0].Status }}",
"rightValue": "Active"
}
]
}
},
"typeVersion": 2.2
},
{
"id": "b58b0157-cd92-4e49-b6e9-739269329775",
"name": "访问密钥超过365天",
"type": "n8n-nodes-base.if",
"position": [
448,
16
],
"parameters": {
"options": {},
"conditions": {
"options": {
"version": 2,
"leftValue": "",
"caseSensitive": true,
"typeValidation": "strict"
},
"combinator": "and",
"conditions": [
{
"id": "93641224-b6d2-4db1-8537-d85b1bbff56d",
"operator": {
"type": "dateTime",
"operation": "before"
},
"leftValue": "={{ $json.ListAccessKeysResponse.ListAccessKeysResult.AccessKeyMetadata[0].CreateDate.toDateTime('s') }}",
"rightValue": "={{ $today.minus(365,'days') }}"
}
]
}
},
"typeVersion": 2.2
},
{
"id": "f98f864f-2efa-4246-93ab-a45667751d7a",
"name": "便签 5",
"type": "n8n-nodes-base.stickyNote",
"position": [
640,
-224
],
"parameters": {
"height": 112,
"content": "### 5. 通过 Slack 通知"
},
"typeVersion": 1
}
],
"active": false,
"pinData": {},
"settings": {
"executionOrder": "v1"
},
"versionId": "9cfdc756-fa57-40df-b849-4e445cfe6631",
"connections": {
"Get many users": {
"main": [
[
{
"node": "Get User Access Key(s)",
"type": "main",
"index": 0
}
]
]
},
"Weekly scheduler": {
"main": [
[
{
"node": "Get many users",
"type": "main",
"index": 0
}
]
]
},
"Get User Access Key(s)": {
"main": [
[
{
"node": "Filter out inactive keys",
"type": "main",
"index": 0
}
]
]
},
"Filter out inactive keys": {
"main": [
[
{
"node": "Access Key Older Than 365 days ",
"type": "main",
"index": 0
}
]
]
},
"Access Key Older Than 365 days ": {
"main": [
[
{
"node": "Send a message",
"type": "main",
"index": 0
}
],
[
{
"node": "No Operation, do nothing",
"type": "main",
"index": 0
}
]
]
}
}
}常见问题
如何使用这个工作流?
复制上方的 JSON 配置代码,在您的 n8n 实例中创建新工作流并选择「从 JSON 导入」,粘贴配置后根据需要修改凭证设置即可。
这个工作流适合什么场景?
中级 - 安全运维, 多模态 AI
需要付费吗?
本工作流完全免费,您可以直接导入使用。但请注意,工作流中使用的第三方服务(如 OpenAI API)可能需要您自行付费。
相关工作流推荐
AWS IAM 非活跃用户自动化告警工作流
监控 AWS IAM 非活跃用户并通过 Slack 发送告警
If
Slack
Aws Iam
+5
16 节点Trung Tran
安全运维
用于 MFA 强制实施和访问密钥停用的自动化 AWS IAM 合规工作流
AWS IAM 合规自动化:强制 MFA 并清理访问密钥
Code
Slack
Aws Iam
+4
19 节点Trung Tran
安全运维
AWS ACM 证书自动续期(含 Slack 审批)
带 Slack 审批工作流的 AWS 证书自动续期
Slack
Filter
Schedule Trigger
+2
14 节点Trung Tran
安全运维
构建用于Slack候选人评估的AI驱动聊天机器人
AI简历分析与候选人评估:Slack和Google表格集成
If
Code
Slack
+12
29 节点Trung Tran
AI 聊天机器人
行为准则问答 Slack 聊天机器人(RAG 驱动)
使用 GPT-4 和 RAG 技术在 Slack 中回答行为准则问题
If
Code
Slack
+10
24 节点Trung Tran
AI RAG 检索增强
智能供应商合同续签与提醒工作流(使用 GPT 4.1 mini)
使用 GPT-4.1 mini、Slack 和 Gmail 自动化供应商合同续签与提醒
If
Code
Slack
+7
21 节点Trung Tran
文档提取
工作流信息
难度等级
中级
节点数量14
分类2
节点类型8
作者
Trung Tran
@trungtranEmpowering small and medium businesses with smart automation and practical AI, no big tech team required.
外部链接
在 n8n.io 查看 →
分享此工作流