Status: IN
CloudTrail event history is doubly scoped (per-account AND per-region), requiring accounts × regions combinatorial queries for comprehensive cross-account incident investigation — a 10-account, 5-region organization needs 50 independent lookups.