{"id":"cloudtrail-event-history-doubly-scoped-per-account-and-region","text":"CloudTrail event history is doubly scoped (per-account AND per-region), requiring accounts × regions combinatorial queries for comprehensive cross-account incident investigation — a 10-account, 5-region organization needs 50 independent lookups.","truth_value":"IN","source":"","source_url":"","source_hash":"","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"cloudtrail-event-history-doubly-scoped-per-account-and-region","truth_value":"IN","reason":"premise"}]}}