Once a week the scenario collects certificates from awsCertificateManager, uses AI to build an expiry report and sends it as a PDF to selectelS3 and by email via Gmail.