Non-human identity inventory dashboard across cloud and security tools
Build a read-only non-human identity inventory workflow for security and platform teams. Create a space-authenticated browser dashboard triggered by an HTTP route, backed by a separate space-authenticated API route that the dashboard polls for inventory data. Collect machine identities—such as service accounts, access keys, tokens, roles, app registrations, and secrets—from sources including AWS, GCP, Azure/Entra, Okta, Wiz, Axonius, CrowdStrike, Vault, Terraform Cloud, GitHub, and GitLab, or equivalent cloud, identity, security, secrets-management, infrastructure, and source-control tools. Normalize the records into a common model, correlate duplicates, and identify issues such as missing owners, stale or unused credentials, excessive privileges, and expiring secrets. Make each source independent and fail-soft, report source health, and cache the last successful inventory so the dashboard remains useful during outages. Present KPIs, charts, search, filters, a sortable identity table, and identity drill-downs with evidence and remediation guidance. Keep the workflow strictly read-only: do not rotate, revoke, or modify credentials. If live connectors are unavailable, use stable, clearly labeled synthetic data and structure each collector so it can later be replaced with a live read-only integration. Tools used: 3B, React, TypeScript/Bun, AWS, Microsoft, Okta, Wiz, Axonius, CrowdStrike, Vault, Terraform Cloud, GitHub, GitLab
What this prompt builds
Identity Index is a read-only dashboard that collects non-human identities from cloud platforms, identity providers, secrets managers, and security tools, normalizes them into a unified schema, and surfaces misconfigurations such as stale credentials, missing owners, and over-privileged access. Built for security and platform teams, it transforms manual inventory work into a repeatable, on-demand view that shortens audit prep and helps prioritize high-risk identities. The workflow uses synthetic data but is structured to accept live integrations without requiring credential rotation or revocation.
The problem
Security and platform teams struggle to inventory non-human identities scattered across AWS, GCP, Azure, Okta, secrets managers, and source-control systems. Manually assembling a view of what identities exist, who owns them, and which credentials are stale, over-privileged, orphaned, or expiring is slow, hard to repeat, and leaves risky credentials hidden. When audits arrive, secrets expire, or investigations require identity context, teams lack a shared, current inventory—delaying response and creating blind spots in governance.
Solution and impact
Identity Index collects machine identities from cloud platforms, identity providers, security tools, and secrets managers, normalizes them into one schema, correlates duplicates, and applies consistent misconfiguration checks. It delivers a searchable dashboard with KPIs, filters, drill-downs, evidence, and remediation guidance, turning open-ended manual work into a repeatable, on-demand view. Teams can shorten audit and investigation prep, reduce blind spots, and prioritize the highest-risk identities first—all without rotating or revoking credentials, thanks to the workflow's read-only, fail-soft design.