Clean Up Expired AWS ACM Certificates with Slack Approval

This n8n workflow automates the management of AWS ACM certificates by running on a daily schedule. It fetches all certificates using AWS ACM's listCertificates API, then loops through each to describe details and filter for expired ones based on status and expiration dates. For each expired certificate, it sends a rich Slack message with details like ARN, domain, and expiration date, awaiting admin approval via reactions (✅ to proceed).

Upon approval, the workflow securely deletes the certificate using AWS ACM's deleteCertificate API and posts a confirmation notification back to Slack. If no approval or rejection occurs, it handles gracefully without action. This ensures human oversight in critical security operations, preventing accidental deletions while proactively cleaning up unused resources.

Ideal for AWS administrators, DevOps teams, and IT ops managing SSL/TLS lifecycles. Benefits include reduced manual auditing time, enhanced security by removing expired certs that could pose risks, cost savings on unused resources, and seamless Slack integration for team collaboration. Use cases span cloud governance, compliance audits, and automated infrastructure maintenance in production environments.