{"id":"cloudtrail-audit-completeness-requires-both-scope-and-fidelity","text":"Complete CloudTrail audit coverage requires addressing two independent dimensions: scope (cross-account event linking via sharedEventID, multi-region awareness for root sign-ins, delegated admin configuration) AND fidelity (inconsistent sensitive data redaction across services means investigation may encounter redacted fields in B2BI/Clean Rooms but full values elsewhere) — closing either gap alone leaves the other open.","truth_value":"IN","source":"","source_url":"","source_hash":"","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"cloudtrail-audit-completeness-requires-both-scope-and-fidelity","truth_value":"IN","reason":"premise"}]}}