[SAMPLE] End-to-End IAM Permission Request Agent

[kenta0629]

What kind of sample would you like to see?

I'd like to contribute an End-to-End Enterprise Agent sample.
I have already implemented the full system here:

🚀 Source Code & Demo

You can find the implementation and documentation here:
https://github.com/kenta0629/iam-permission-request-agent

---

Proposal: IAM Permission Request Agent

This sample demonstrates a production-ready, multi-container system that automates Google Cloud IAM permission requests based on the principle of least privilege.

System Architecture

• Backend: Vertex AI Agent Engine (Python/ADK)
• Frontend: Chainlit Chat UI (Cloud Run)
• Webhook: Cloud Functions for Slack notifications

Key ADK Features

• SequentialAgent: Orchestrates Architect Agent (Design) and Ops Agent (Execution).
• Plugins: Logs sessions using BigQueryAgentAnalyticsPlugin.
• Tools: Custom tools for BigQuery, IAM, and Slack.
• Guardrails: Input validation using Model Armor.
• Memory: Context management via Vertex AI Memory Bank.

Proposed Directory Structure

python/agents/iam-permission-request/
├── backend/
├── frontend/
├── webhook/
├── scripts/
└── README.md

What ADK language is the sample for?

Python