Slack Alerts for AWS IAM Access Keys Older Than 365 Days

This workflow automates the detection and notification of stale AWS IAM access keys that haven't been rotated in over a year, helping maintain robust cloud security. It runs weekly via a scheduler, lists all IAM users, retrieves their access keys, filters for active ones, and flags those created more than 365 days ago. If outdated keys are found, it posts a comprehensive Slack message with user details, key IDs, and creation dates, prompting immediate action.

Ideal for DevOps teams, security officers, and AWS account owners, it prevents compliance violations and reduces risks from long-lived credentials. By integrating AWS IAM API calls with Slack notifications, it saves hours of manual auditing, ensuring proactive key management without constant oversight.

Customization is straightforward: adjust the age threshold, scheduler frequency, Slack channel, or add email notifications. Requires AWS credentials with ListUsers and ListAccessKeys permissions, plus Slack bot setup. Boosts security posture effortlessly in n8n.