Transform Cloud Docs to Security Baselines with OpenAI & GDrive

This workflow automates the conversion of cloud provider documentation (via URLs) into structured, auditable security control baselines. It fetches and sanitizes HTML from provided URLs, leverages OpenAI to extract security requirements in strict 3-line TXT blocks, composes enforceable controls in 7-line TXT blocks with equivalence consolidation, and builds a final baseline artifact (TXT or JSON) prefixed with a 'Technology:' header.

Designed for multicloud environments, it supports AWS, Azure, and GCP out-of-the-box, with extensibility for others via prompt adjustments. Triggered by a POST webhook with Basic Auth, it validates inputs like cloudProvider, technology, and urls[], generates a UUID, resolves or creates a Google Drive folder, processes the AI pipeline (Extractor → Composer → Baseline Builder → optional Auditor), and delivers a downloadable artifact while appending/creating the file in Drive.

Benefits include eliminating manual extraction, ensuring consistency across providers, and producing portable baselines ready for audits, reviews, or enforcement tools. Ideal for security teams rapidly generating or updating baselines for compliance, risk management, or DevSecOps pipelines, saving hours of tedious work.