Status: IN
Amazon Q makes API calls with `dryRun: true` to verify permissions without executing — these are logged in CloudTrail and distinguishable from actual actions.
Source: entries/2026/03/11/amazonq-latest-aws-builder-use-ug-logging-using-cloudtrailhtml.md