Get Slack alerts and approve SSL certificate renewals automatically

Flags certificates about to expire, asks for approval in Slack, and renews them automatically once approved.

How the work actually flows

A straight line. Runs once per each expiring certificate; a person has to approve before it continues.

Pattern: Sequence (1) ยท Multiple Instances without a priori Run-Time Knowledge (15)

flowchart TD trig(["daily certificate check"]):::trigtime s0["flag expiring certificates"]:::task s1["post alert to slack"]:::svc s2[["renew certificate"]]:::mi trig --> s0 s0 --> s1 hg(("team approves renewal")):::human s1 --> hg hg -->|"approved"| s2 hg -. "sent back" .-> s1 out[/"certificate renewed with approval logged"/]:::out pay{{"avoid unexpected certificate expiry"}}:::pay s2 --> out out --> pay classDef task fill:#e7f6fe,stroke:#34b8f0,color:#2c2a29 classDef svc fill:#f6f8fa,stroke:#7c8795,color:#2c2a29 classDef mi fill:#e7f6fe,stroke:#0079a8,color:#2c2a29,stroke-width:2px classDef human fill:#fff,stroke:#0079a8,color:#0079a8 classDef store fill:#f6f8fa,stroke:#0079a8,color:#2c2a29 classDef trig fill:#00a4eb,stroke:#0079a8,color:#fff,font-weight:bold classDef trigtime fill:#00a4eb,stroke:#0079a8,color:#fff,font-weight:bold classDef trigdata fill:#8ad4f5,stroke:#0079a8,color:#06314c,font-weight:bold classDef gate fill:#fff,stroke:#e8a23d,color:#6b4708,font-weight:bold classDef out fill:#1f9d6b,stroke:#167a53,color:#fff,font-weight:bold classDef pay fill:#06314c,stroke:#021f33,color:#fff
Starts itA stepAn outside serviceRuns once per itemA personResultPayoff
Build size
Standard

A mid-size build with several tools working together.

Business functions
Messaging & NotificationsDevOps & IT Operations
Connects
AWS Certificate ManagerSlack

The problem it solves

An expired SSL certificate can take a website or service down without warning. Keeping track of renewal dates across many certificates by hand is easy to forget, and you don't want renewals happening without anyone signing off.

Who it fits

IT or DevOps teams managing multiple SSL certificates who want a safety check before renewals happen.

How it works

  1. Checks certificates on a daily schedule
  2. Flags any certificate expiring within the next week
  3. Posts an alert in Slack with the certificate details
  4. Waits for someone to approve or reject the renewal
  5. Renews the certificate automatically once approved
What you get

Certificates that never expire without you noticing

You get a Slack alert before any SSL certificate expires, with renewal handled automatically once you approve it.

What you get

A renewed certificate, plus a Slack record of who approved it and when.

What you need

An AWS account with Certificate Manager access and a Slack workspace with a connected bot.

We can build this. But should you?

The hard question is not how to build it. It is whether this is the right thing to build first.

That is what a Fractional Chief AI Officer figures out with you, before anyone writes a line of code.

Let's Talk Strategy

Related automations

Back to the AI Playbook