{"id":"cloudtrail-cross-account-denied-not-logged-target","text":"Cross-account AssumeRole denied requests are NOT logged in the target account's CloudTrail — only the source (caller's) account sees the denial.","truth_value":"IN","source":"entries/2026/03/11/IAM-latest-UserGuide-cloudtrail-integrationhtml.md","source_url":"","source_hash":"cb7bc3bfff11f21a","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"cloudtrail-cross-account-denied-not-logged-target","truth_value":"IN","reason":"premise"}]}}