{ "edges": [ { "to": "7eeadefd-3e57-47dc-b43d-a3f7c8cde847", "from": "b7a797fc-4da0-453c-a6fb-084fcbbdb164", "toPort": "0", "fromPort": "0" }, { "to": "7ba7997a-4510-4794-82b0-8c93f94b155f", "from": "b7a797fc-4da0-453c-a6fb-084fcbbdb164", "toPort": "0", "fromPort": "0" }, { "to": "e4770cee-6295-4691-b703-77db8ac22b42", "from": "7eeadefd-3e57-47dc-b43d-a3f7c8cde847", "toPort": "0", "fromPort": "0" }, { "to": "6f728ae1-4c9a-4dbd-97c4-dabc197cefbd", "from": "7eeadefd-3e57-47dc-b43d-a3f7c8cde847", "toPort": "0", "fromPort": "0" }, { "to": "a1a4f15d-b804-4420-b127-93216934bbb4", "from": "7eeadefd-3e57-47dc-b43d-a3f7c8cde847", "toPort": "0", "fromPort": "0" }, { "to": "6e455dd4-38ba-4a44-897f-82e6d8668528", "from": "fb24ae48-4b1f-4508-9616-a330439e4dfc", "toPort": "0", "fromPort": "0" }, { "to": "45a9b350-c722-403a-9459-8efcfd8ecf93", "from": "6e455dd4-38ba-4a44-897f-82e6d8668528", "toPort": "0", "fromPort": "0" }, { "to": "b7a797fc-4da0-453c-a6fb-084fcbbdb164", "from": "d9fa4b7a-5f80-4bd2-b04c-68fb703d90fe", "toPort": "0", "fromPort": "0" }, { "to": "b7a797fc-4da0-453c-a6fb-084fcbbdb164", "from": "12b326d1-8d81-4a2b-8116-64cc3cd288a6", "toPort": "0", "fromPort": "ai_outputParser" }, { "to": "b7a797fc-4da0-453c-a6fb-084fcbbdb164", "from": "14295ac3-7915-4def-8577-46c8654ecc01", "toPort": "0", "fromPort": "ai_languageModel" }, { "to": "d9fa4b7a-5f80-4bd2-b04c-68fb703d90fe", "from": "45a9b350-c722-403a-9459-8efcfd8ecf93", "toPort": "0", "fromPort": "0" }, { "to": "d9fa4b7a-5f80-4bd2-b04c-68fb703d90fe", "from": "0e526c0b-74aa-4808-bed3-4d2129d9076f", "toPort": "0", "fromPort": "ai_outputParser" }, { "to": "d9fa4b7a-5f80-4bd2-b04c-68fb703d90fe", "from": "b4bee34d-84e8-4366-b0a0-ef6f7016dea3", "toPort": "0", "fromPort": "ai_languageModel" } ], "nodes": [ { "id": "fb24ae48-4b1f-4508-9616-a330439e4dfc", "name": "Daily Cloud Cost Check", "type": "trigger", "params": { "kind": "n8n-nodes-base.scheduleTrigger", "rule": { "interval": [ { "triggerAtHour": 8 } ] } }, "position": [ -816, 464 ] }, { "id": "6e455dd4-38ba-4a44-897f-82e6d8668528", "name": "Workflow Configuration", "type": "set", "params": { "options": {}, "assignments": { "assignments": [ { "id": "id-1", "name": "costThresholdCritical", "type": "number", "value": 10000 }, { "id": "id-2", "name": "costThresholdHigh", "type": "number", "value": 5000 }, { "id": "id-3", "name": "slackChannelCritical", "type": "string", "value": "<__PLACEHOLDER_VALUE__Slack Channel ID for Critical Alerts__>" }, { "id": "id-4", "name": "slackChannelHigh", "type": "string", "value": "<__PLACEHOLDER_VALUE__Slack Channel ID for High Priority Alerts__>" }, { "id": "id-5", "name": "financeEmail", "type": "string", "value": "<__PLACEHOLDER_VALUE__Finance Team Email Address__>" } ] }, "includeOtherFields": true }, "position": [ -592, 464 ] }, { "id": "45a9b350-c722-403a-9459-8efcfd8ecf93", "name": "Simulate Cloud Spend Data", "type": "set", "params": { "options": {}, "assignments": { "assignments": [ { "id": "id-1", "name": "cloudProvider", "type": "string", "value": "AWS" }, { "id": "id-2", "name": "totalSpend", "type": "number", "value": 12500 }, { "id": "id-3", "name": "previousMonthSpend", "type": "number", "value": 8000 }, { "id": "id-4", "name": "budgetLimit", "type": "number", "value": 10000 }, { "id": "id-5", "name": "topServices", "type": "array", "value": "[{\"service\": \"EC2\", \"cost\": 5000, \"trend\": \"increasing\"}, {\"service\": \"S3\", \"cost\": 3000, \"trend\": \"stable\"}, {\"service\": \"RDS\", \"cost\": 2500, \"trend\": \"increasing\"}, {\"service\": \"Lambda\", \"cost\": 2000, \"trend\": \"decreasing\"}]" }, { "id": "id-6", "name": "unusedResources", "type": "array", "value": "[{\"resourceId\": \"i-abc123\", \"type\": \"EC2 Instance\", \"monthlyCost\": 150}, {\"resourceId\": \"vol-xyz789\", \"type\": \"EBS Volume\", \"monthlyCost\": 50}]" }, { "id": "id-7", "name": "timestamp", "type": "string", "value": "={{ $now.toISO() }}" } ] }, "includeOtherFields": true }, "position": [ -368, 464 ] }, { "id": "d9fa4b7a-5f80-4bd2-b04c-68fb703d90fe", "name": "Cost Intelligence Agent", "type": "llm", "params": { "text": "=Cloud Spend Data:\nProvider: {{ $json.cloudProvider }}\nTotal Spend: ${{ $json.totalSpend }}\nPrevious Month: ${{ $json.previousMonthSpend }}\nBudget Limit: ${{ $json.budgetLimit }}\n\nTop Services:\n{{ JSON.stringify($json.topServices, null, 2) }}\n\nUnused Resources:\n{{ JSON.stringify($json.unusedResources, null, 2) }}", "prompt": "=Cloud Spend Data:\nProvider: {{ $json.cloudProvider }}\nTotal Spend: ${{ $json.totalSpend }}\nPrevious Month: ${{ $json.previousMonthSpend }}\nBudget Limit: ${{ $json.budgetLimit }}\n\nTop Services:\n{{ JSON.stringify($json.topServices, null, 2) }}\n\nUnused Resources:\n{{ JSON.stringify($json.unusedResources, null, 2) }}", "options": { "systemMessage": "You are a Cloud Cost Intelligence Agent specialized in analyzing cloud infrastructure spending patterns and identifying optimization opportunities.\n\nYour task is to:\n1. Analyze the provided cloud spend metrics including total spend, budget limits, and service-level costs\n2. Calculate the percentage change from the previous month\n3. Determine budget status (within_budget if under limit, over_budget if exceeded, approaching_limit if within 10% of limit)\n4. Identify spending trends (increasing, decreasing, or stable) based on month-over-month comparison\n5. Identify the top 3 cost drivers and their impact on overall spending\n6. Detect unused or underutilized resources and calculate potential savings\n7. Recommend specific optimization opportunities with estimated savings and implementation effort (low/medium/high)\n8. Assess risk level based on budget overrun, spending velocity, and resource waste\n9. Provide detailed reasoning for your analysis\n\nRisk Level Guidelines:\n- Critical: Over budget by >20% OR spending increasing >50% month-over-month\n- High: Over budget by 10-20% OR spending increasing 30-50% month-over-month\n- Medium: Approaching budget limit (within 10%) OR spending increasing 15-30%\n- Low: Within budget and stable or decreasing spend\n\nReturn structured JSON output with all required fields." }, "provider": "openai", "promptType": "define", "approximated": true, "systemMessage": "You are a Cloud Cost Intelligence Agent specialized in analyzing cloud infrastructure spending patterns and identifying optimization opportunities.\n\nYour task is to:\n1. Analyze the provided cloud spend metrics including total spend, budget limits, and service-level costs\n2. Calculate the percentage change from the previous month\n3. Determine budget status (within_budget if under limit, over_budget if exceeded, approaching_limit if within 10% of limit)\n4. Identify spending trends (increasing, decreasing, or stable) based on month-over-month comparison\n5. Identify the top 3 cost drivers and their impact on overall spending\n6. Detect unused or underutilized resources and calculate potential savings\n7. Recommend specific optimization opportunities with estimated savings and implementation effort (low/medium/high)\n8. Assess risk level based on budget overrun, spending velocity, and resource waste\n9. Provide detailed reasoning for your analysis\n\nRisk Level Guidelines:\n- Critical: Over budget by >20% OR spending increasing >50% month-over-month\n- High: Over budget by 10-20% OR spending increasing 30-50% month-over-month\n- Medium: Approaching budget limit (within 10%) OR spending increasing 15-30%\n- Low: Within budget and stable or decreasing spend\n\nReturn structured JSON output with all required fields.", "hasOutputParser": true }, "position": [ -144, 464 ] }, { "id": "b4bee34d-84e8-4366-b0a0-ef6f7016dea3", "name": "OpenAI Model - Cost Intelligence", "type": "llm", "params": { "model": "gpt-4o", "options": { "temperature": 0.1 }, "provider": "openai", "temperature": 0.1, "builtInTools": {} }, "position": [ -208, 688 ] }, { "id": "0e526c0b-74aa-4808-bed3-4d2129d9076f", "name": "Cost Analysis Output Parser", "type": "passthrough", "params": { "mode": "noOp", "schemaType": "manual", "inputSchema": "{\n \"type\": \"object\",\n \"properties\": {\n \"totalSpend\": {\n \"type\": \"number\",\n \"description\": \"Total cloud spend amount\"\n },\n \"budgetStatus\": {\n \"type\": \"string\",\n \"description\": \"Budget status: within_budget, over_budget, or approaching_limit\"\n },\n \"spendTrend\": {\n \"type\": \"string\",\n \"description\": \"Spending trend: increasing, decreasing, or stable\"\n },\n \"percentageChange\": {\n \"type\": \"number\",\n \"description\": \"Percentage change from previous month\"\n },\n \"topCostDrivers\": {\n \"type\": \"array\",\n \"description\": \"Top 3 services driving costs\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"service\": {\"type\": \"string\"},\n \"cost\": {\"type\": \"number\"},\n \"impact\": {\"type\": \"string\"}\n }\n }\n },\n \"optimizationOpportunities\": {\n \"type\": \"array\",\n \"description\": \"List of cost optimization opportunities\",\n \"items\": {\n \"type\": \"object\",\n \"properties\": {\n \"opportunity\": {\"type\": \"string\"},\n \"estimatedSavings\": {\"type\": \"number\"},\n \"effort\": {\"type\": \"string\"}\n }\n }\n },\n \"unusedResourcesCount\": {\n \"type\": \"number\",\n \"description\": \"Number of unused resources identified\"\n },\n \"potentialSavings\": {\n \"type\": \"number\",\n \"description\": \"Total potential monthly savings\"\n },\n \"riskLevel\": {\n \"type\": \"string\",\n \"description\": \"Risk level: low, medium, high, or critical\"\n },\n \"analysisReasoning\": {\n \"type\": \"string\",\n \"description\": \"Detailed reasoning for the analysis\"\n }\n },\n \"required\": [\"totalSpend\", \"budgetStatus\", \"spendTrend\", \"percentageChange\", \"topCostDrivers\", \"optimizationOpportunities\", \"riskLevel\", \"analysisReasoning\"]\n}" }, "position": [ 16, 784 ] }, { "id": "b7a797fc-4da0-453c-a6fb-084fcbbdb164", "name": "Governance Agent", "type": "llm", "params": { "text": "=Cost Intelligence Analysis:\n{{ JSON.stringify($json.output, null, 2) }}\n\nConfiguration Thresholds:\nCritical Threshold: ${{ $('Workflow Configuration').first().json.costThresholdCritical }}\nHigh Threshold: ${{ $('Workflow Configuration').first().json.costThresholdHigh }}", "prompt": "=Cost Intelligence Analysis:\n{{ JSON.stringify($json.output, null, 2) }}\n\nConfiguration Thresholds:\nCritical Threshold: ${{ $('Workflow Configuration').first().json.costThresholdCritical }}\nHigh Threshold: ${{ $('Workflow Configuration').first().json.costThresholdHigh }}", "options": { "systemMessage": "You are a Cloud Governance Agent responsible for orchestrating alerts, optimization recommendations, and finance escalation based on cost intelligence analysis.\n\nYour task is to:\n1. Review the cost intelligence analysis including risk level, budget status, spending trends, and optimization opportunities\n2. Determine the appropriate severity level for governance actions:\n - Critical: Risk level is critical OR total spend exceeds critical threshold OR requires immediate intervention\n - High: Risk level is high OR total spend exceeds high threshold OR significant budget overrun\n - Medium: Risk level is medium OR approaching thresholds OR moderate optimization needed\n - Low: Risk level is low AND within budget AND no urgent actions needed\n3. Decide if finance team escalation is required (true for critical/high severity OR budget overruns >10%)\n4. Generate a clear, actionable alert message summarizing the situation, key metrics, and urgency\n5. Recommend specific immediate actions prioritized by impact and urgency\n6. Provide escalation reasoning if finance involvement is needed\n7. Document the governance decision with full rationale\n\nAlert Message Format:\n- Start with severity emoji (🚨 Critical, ⚠️ High, 📊 Medium, ✅ Low)\n- Include key metrics: total spend, budget status, percentage change\n- Highlight top cost drivers\n- List potential savings\n- End with call to action\n\nReturn structured JSON output with all required fields." }, "provider": "openai", "promptType": "define", "approximated": true, "systemMessage": "You are a Cloud Governance Agent responsible for orchestrating alerts, optimization recommendations, and finance escalation based on cost intelligence analysis.\n\nYour task is to:\n1. Review the cost intelligence analysis including risk level, budget status, spending trends, and optimization opportunities\n2. Determine the appropriate severity level for governance actions:\n - Critical: Risk level is critical OR total spend exceeds critical threshold OR requires immediate intervention\n - High: Risk level is high OR total spend exceeds high threshold OR significant budget overrun\n - Medium: Risk level is medium OR approaching thresholds OR moderate optimization needed\n - Low: Risk level is low AND within budget AND no urgent actions needed\n3. Decide if finance team escalation is required (true for critical/high severity OR budget overruns >10%)\n4. Generate a clear, actionable alert message summarizing the situation, key metrics, and urgency\n5. Recommend specific immediate actions prioritized by impact and urgency\n6. Provide escalation reasoning if finance involvement is needed\n7. Document the governance decision with full rationale\n\nAlert Message Format:\n- Start with severity emoji (🚨 Critical, ⚠️ High, 📊 Medium, ✅ Low)\n- Include key metrics: total spend, budget status, percentage change\n- Highlight top cost drivers\n- List potential savings\n- End with call to action\n\nReturn structured JSON output with all required fields.", "hasOutputParser": true }, "position": [ 208, 464 ] }, { "id": "14295ac3-7915-4def-8577-46c8654ecc01", "name": "OpenAI Model - Governance", "type": "llm", "params": { "model": "gpt-4o", "options": { "temperature": 0.1 }, "provider": "openai", "temperature": 0.1, "builtInTools": {} }, "position": [ 224, 672 ] }, { "id": "12b326d1-8d81-4a2b-8116-64cc3cd288a6", "name": "Governance Output Parser", "type": "passthrough", "params": { "mode": "noOp", "schemaType": "manual", "inputSchema": "{\n \"type\": \"object\",\n \"properties\": {\n \"severity\": {\n \"type\": \"string\",\n \"description\": \"Severity level: critical, high, medium, or low\"\n },\n \"requiresFinanceEscalation\": {\n \"type\": \"boolean\",\n \"description\": \"Whether finance team escalation is required\"\n },\n \"alertMessage\": {\n \"type\": \"string\",\n \"description\": \"Formatted alert message for notifications\"\n },\n \"recommendedActions\": {\n \"type\": \"array\",\n \"description\": \"List of recommended immediate actions\",\n \"items\": {\n \"type\": \"string\"\n }\n },\n \"escalationReason\": {\n \"type\": \"string\",\n \"description\": \"Reason for escalation if applicable\"\n },\n \"governanceDecision\": {\n \"type\": \"string\",\n \"description\": \"Detailed governance decision and rationale\"\n }\n },\n \"required\": [\"severity\", \"requiresFinanceEscalation\", \"alertMessage\", \"recommendedActions\", \"governanceDecision\"]\n}" }, "position": [ 384, 688 ] }, { "id": "7eeadefd-3e57-47dc-b43d-a3f7c8cde847", "name": "Route by Severity", "type": "switch", "params": { "rules": { "values": [ { "outputKey": "Critical", "conditions": { "options": { "leftValue": "", "caseSensitive": false, "typeValidation": "loose" }, "combinator": "and", "conditions": [ { "operator": { "type": "string", "operation": "equals" }, "leftValue": "={{ $json.severity }}", "rightValue": "critical" } ] }, "renameOutput": true }, { "outputKey": "High", "conditions": { "options": { "leftValue": "", "caseSensitive": false, "typeValidation": "loose" }, "combinator": "and", "conditions": [ { "operator": { "type": "string", "operation": "equals" }, "leftValue": "={{ $json.severity }}", "rightValue": "high" } ] }, "renameOutput": true }, { "outputKey": "Finance Escalation", "conditions": { "options": { "leftValue": "", "caseSensitive": true, "typeValidation": "strict" }, "combinator": "and", "conditions": [ { "operator": { "type": "boolean", "operation": "equals" }, "leftValue": "={{ $json.requiresFinanceEscalation }}", "rightValue": true } ] }, "renameOutput": true } ] }, "options": { "ignoreCase": true, "fallbackOutput": "extra", "renameFallbackOutput": "Low Priority" } }, "position": [ 624, 496 ] }, { "id": "e4770cee-6295-4691-b703-77db8ac22b42", "name": "Slack Alert - Critical", "type": "integration", "params": { "text": "={{ $json.output.alertMessage }}\n\n*Recommended Actions:*\n{{ $json.output.recommendedActions.map((action, i) => `${i + 1}. ${action}`).join('\\n') }}\n\n*Governance Decision:*\n{{ $json.output.governanceDecision }}", "select": "channel", "service": "slack", "channelId": { "__rl": true, "mode": "id", "value": "={{ $('Workflow Configuration').first().json.slackChannelCritical }}" }, "operation": "read", "otherOptions": {}, "authentication": "oAuth2" }, "position": [ 912, 416 ] }, { "id": "6f728ae1-4c9a-4dbd-97c4-dabc197cefbd", "name": "Slack Alert - High", "type": "integration", "params": { "text": "={{ $json.output.alertMessage }}\n\n*Recommended Actions:*\n{{ $json.output.recommendedActions.map((action, i) => `${i + 1}. ${action}`).join('\\n') }}", "select": "channel", "service": "slack", "channelId": { "__rl": true, "mode": "id", "value": "={{ $('Workflow Configuration').first().json.slackChannelHigh }}" }, "operation": "read", "otherOptions": {}, "authentication": "oAuth2" }, "position": [ 912, 608 ] }, { "id": "a1a4f15d-b804-4420-b127-93216934bbb4", "name": "Email Finance Team", "type": "integration", "params": { "html": "=\n\n

Cloud Cost Governance Alert

Severity: {{ $json.output.severity.toUpperCase() }}

Alert Summary

Escalation Reason

{{ $json.output.escalationReason || 'Finance review required due to severity level' }}

Recommended Actions

${action}

Governance Decision

This is an automated alert from the Cloud Cost Intelligence and Governance system.

\n\n", "options": {}, "service": "smtp", "subject": "=Cloud Cost Governance Alert - {{ $json.output.severity.toUpperCase() }} Severity", "toEmail": "={{ $('Workflow Configuration').first().json.financeEmail }}", "fromEmail": "<__PLACEHOLDER_VALUE__Your company email address__>", "operation": "read" }, "position": [ 928, 800 ] }, { "id": "7ba7997a-4510-4794-82b0-8c93f94b155f", "name": "Log Cost Analysis", "type": "passthrough", "params": { "mode": "noOp", "columns": { "value": null, "mappingMode": "autoMapInputData" }, "options": {}, "dataTableId": { "__rl": true, "mode": "name", "value": "cloud_cost_analysis_log" } }, "position": [ 912, 976 ] } ] }

Monitor multi-cloud costs and enforce policies with OpenAI and Slack alerts