SentinelFlow Console
Cloud-native triage, storage, and actions over security events (Pub/Sub → Cloud Run → Firestore)

Alert 49a8ffff-0bf5-4266-a79a-f1ed4c070d7e

Severity
high (conf 1.00)
Status
action_executed
Event Type
iam.serviceAccountKeys.create
Principal
user:erin@corp.example.com
Target
projects/acme-prod/buckets/site-assets
Labels
serviceAccount, key, credential
Reason Tokens
Description
New service account key created outside change window
Created
9/15/2025, 11:19:59 PM