Status: IN
When Amazon Q calls other AWS APIs on behalf of a user (PassRequest), the CloudTrail event shows both `sourceIPAddress` and `invokedBy` as `q.amazonaws.com`, not the user's IP.
Source: entries/2026/03/11/amazonq-latest-aws-builder-use-ug-logging-using-cloudtrailhtml.md