SentinelFlow Console
Cloud-native triage, storage, and actions over security events (Pub/Sub → Cloud Run → Firestore)

Alert ec9f868d-ddaa-40e4-a5f3-9d37051c5a8e

Severity
high (conf 1.00)
Status
action_executed
Event Type
iam.setIamPolicy.bindingAdd
Principal
user:dave@corp.example.com
Target
projects/acme-prod/instances/web-01
Labels
iam, policy, role, elevated
Reason Tokens
Description
IAM binding added granting elevated role role=roles/editor
Created
9/12/2025, 6:44:54 PM