Auto-Renew AWS ACM Certificates with Slack Approval

This workflow automates the management of AWS Certificate Manager (ACM) certificates by running daily checks for those expiring within 7 days. It lists certificates across regions, filters for valid ones nearing expiry, and sends detailed Slack notifications including domain, SANs, ARN, algorithm, status, and dates. The workflow pauses for team approval before proceeding.

Key steps include a Schedule Trigger for daily execution, AWS node to fetch certificates (with pagination support), IF/Filter node using expressions like {{ $json.NotAfter.toDateTime('s') }} is before {{ $today.plus(7,'days') }} and validity checks, Slack 'Send & Wait' for interactive approval, and conditional AWS renew action on approval. Rejections are logged without action, ensuring auditable processes.

Ideal for SRE/DevOps teams, cloud ops, and MSPs handling multiple certs. Benefits include hands-off renewals with human oversight, reduced downtime risks, compliance via audit trails, and time savings over manual monitoring. Setup requires AWS credentials for ACM list/read/renew and Slack bot OAuth; customize region, schedule, and Slack message templates easily.

Use cases: Proactive cert management in production environments, multi-region setups (via loops), and integration into broader security workflows for seamless operations.