Run Weekly Compliance Audits with Claude AI Across AWS, Google & GitHub
Schedule automated security compliance audits across AWS IAM, Google Workspace, and GitHub with Claude AI analyzing user access.
Template details
- Category
- Security Compliance
- Uses
- 1.6K
- Rating
- 4.8 / 5
- Setup time
- 15 min
- Connected apps
- 5
Workflow preview
Pan and zoom the exact workflow you’ll import.
Everything this workflow handles
Automate your security compliance program with scheduled AI-powered audits across your entire cloud infrastructure. This puq.ai template collects user access data from AWS IAM, Google Workspace, and GitHub, then uses Claude AI to analyze findings against SOC 2, ISO 27001, and GDPR frameworks — automatically escalating critical issues and maintaining complete audit trails.
Designed for security teams managing continuous compliance requirements, this workflow replaces manual quarterly audits with automated weekly assessments that catch issues before they become audit findings.
How This Automation Works
1. Scheduled Weekly Execution
The workflow runs automatically every Monday at 2 AM UTC, ensuring consistent compliance monitoring without manual intervention.
2. Multi-Platform Data Collection
The audit collects comprehensive security data from three platforms:
- AWS IAM — Users, policies, MFA status, access keys, last activity
- Google Workspace — Full user directory with security settings
- GitHub — Organization members with 2FA status
3. AI Compliance Analysis with Claude AI
Claude AI analyzes collected data against industry frameworks:
Access Control (SOC 2 CC6.1)
- Users without MFA enabled
- Inactive users (no login >90 days)
- Excessive admin/root privileges
- Orphaned accounts from former employees
Password & Authentication (ISO 27001 A.9.4)
- Weak password policies
- Missing 2FA enforcement
- Old access keys (>90 days)
Data Protection (GDPR Art. 32)
- Public repositories with sensitive data
- Overly permissive sharing settings
Audit Trail (SOC 2 CC7.2)
- Missing logging configurations
- Insufficient monitoring
4. Structured Findings Generation
Claude AI produces detailed findings with:
- Severity classification (Critical, High, Medium, Low)
- Affected systems and specific users/resources
- Remediation recommendations
- Deadline assignments
- Owner assignment (Security, IT, DevOps, HR)
5. Airtable Audit Logging
Complete audit snapshots are saved to Airtable including overall score, risk level, findings count by severity, platform statistics, and full AI analysis.
6. Risk-Based Escalation
Findings are routed based on risk level:
- Critical → Immediate CISO alert via Slack + urgent Gmail to security leadership
- High → Security team Slack notification + email with 48-hour remediation deadline
- Medium/Low → Standard weekly report to compliance team
Key Benefits
- Automated weekly compliance monitoring
- AI-powered analysis against SOC 2, ISO 27001, GDPR
- Multi-cloud visibility in single audit
- Risk-based escalation to appropriate stakeholders
- Complete audit trail for external auditors
- Reduced manual audit preparation effort
- Continuous compliance posture visibility
- Structured remediation tracking
Use Cases
- Organizations preparing for SOC 2 certification
- Companies maintaining ISO 27001 compliance
- Businesses subject to GDPR requirements
- Security teams managing multi-cloud environments
- IT departments tracking user access hygiene
- Compliance officers needing continuous monitoring
Integrations Used
- Schedule — Weekly cron trigger (Monday 2 AM UTC)
- AWS IAM — User and policy data collection
- Google Workspace Admin — Directory and security data
- GitHub — Organization member and 2FA status
- Claude AI — Compliance analysis and findings generation
- Airtable — Audit logging and tracking
- Slack — Team notifications and CISO alerts
- Gmail — Detailed audit reports and escalations
Why Use This puq.ai Template?
Manual compliance audits are time-consuming, inconsistent, and often reactive. This template replaces quarterly fire drills with continuous AI-powered monitoring, catching compliance gaps weekly instead of discovering them during external audits.
With puq.ai, you deploy enterprise-grade compliance automation in minutes — no code, no audit surprises, no compliance gaps.
Get Started in Minutes
- Import the template into puq.ai
- Connect your AWS IAM, Google Workspace Admin, GitHub, Claude AI, Airtable, Slack, and Gmail accounts
- Configure your Airtable base for audit logging
- Set up Slack channels for security notifications
- Customize AI prompts for your specific compliance requirements
- Activate and start receiving weekly compliance insights
Audit continuously. Remediate proactively. Stay compliant.
Use this template to transform reactive compliance into continuous security monitoring — powered by Claude AI analysis and orchestrated by puq.ai.
Questions before you start
Do I need to write code to use this?
No. This is a pre-built workflow — you connect your accounts and adjust settings in puq.ai's visual editor. No custom code required.
How long does setup actually take?
Most people have this workflow running in about 15 min setup. You're connecting accounts and mapping a few fields for GitHub, Claude, Airtable, Slack, and Gmail — not building the automation from scratch.
What if I don't use one of these apps?
You can swap any step for another supported app inside the workflow builder after you open the template — the trigger-to-action structure stays the same.
What happens after I click "Use this template"?
You'll be taken to your puq.ai workspace with this workflow pre-loaded — connect GitHub, Claude, Airtable, Slack, and Gmail, adjust any settings, and turn it on.
Can I customize the workflow after I import it?
Yes — this template is a starting point, not a fixed script. Add, remove, or rewire steps freely once it's in your workspace.
Is my data safe when I connect an app?
You control which accounts you connect, and you can disconnect any integration at any time from your puq.ai dashboard.