AWS IAM Compliance: Enforce MFA & Clean Up Access Keys

This workflow automates AWS IAM security compliance by running daily scans to identify users without Multi-Factor Authentication (MFA) devices. It retrieves all IAM users, checks their MFA status via AWS APIs, filters out those without MFA, sends Slack notifications to alert admins, fetches active access keys for non-compliant users, and deactivates them to prevent unauthorized access.

Key benefits include reduced manual oversight, proactive risk mitigation, and ensured adherence to security best practices like least privilege and MFA enforcement. It saves hours of weekly compliance audits, minimizes breach risks from dormant or unused keys, and provides audit-ready logs through n8n executions.

Ideal for DevOps, security engineers, and cloud teams managing AWS environments. Use cases: Multi-account setups needing centralized compliance, post-onboarding user hygiene, or regulatory requirements like SOC2/ISO27001. Easily customizable for additional notifications or integrations like email/Jira.