AccessPulse

AccessPulse is a web app (with optional Slack/Teams bot) that continuously monitors cloud IAM activity and flags “access anomalies” that usually slip through audits: sudden privilege spikes, unused admin roles, service accounts used from new regions, and permission grants outside change windows. It connects to AWS CloudTrail/IAM, Azure AD/Entra ID, and GCP Cloud Audit Logs, then builds a baseline per identity and workload. Instead of dumping alerts, it produces short, actionable investigations: what changed, who approved it (or not), blast radius, and a one-click rollback plan (where safe). It also generates weekly “access hygiene” reports for leadership: top risky identities, dormant credentials, and policy hotspots. This is not a full IAM suite; it’s a focused detection-and-remediation layer that complements existing IAM tools and SIEMs without requiring a massive rollout.