Status: IN
Amazon MQ masks `data` and `password` fields (replaced with `***`) in CloudTrail logs for CreateBroker, CreateUser, UpdateConfiguration, and UpdateUser operations.
Source: entries/2026/03/11/amazon-mq-latest-developer-guide-security-logging-monitoring-cloudtrailhtml.md