Tools



Google Admin

Jira

S3 Activity Agent



Trigger

New JIRA ticket

Agent Flow

When a user provides a Jira ticket or an employee email for offboarding, the agent:

  • Retrieves recent Google Workspace activity

  • Audits login history (locations, devices, anomalies)

  • Analyzes file downloads and external sharing

  • Calls the S3 Activity Investigator agent if AWS logs are relevant

  • Flags security risks

It then:

  • Summarizes findings with timestamps and risk ratings

  • Suggests appropriate actions (session revocation, access removal, data transfer)

  • Executes approved security actions (e.g., revoke session)

  • Documents and reports all actions performed in the jira ticket, updating status

YAML Config

Coming soon