Prometheus Security Alerts

Security signals as Prometheus alerts.

Auth failures

Spike: brute force or token leak.

Alert; investigate.

Privilege escalation

Unexpected role changes. CloudTrail or audit log.

Suspicious.

Anomalous egress

Sudden traffic to new external IPs.

Possible exfiltration.