Status: IN
Federated user sign-in events always show `mfaAuthenticated: "false"` and `MFAUsed: "No"` because MFA is evaluated at the federation/STS level, not at console sign-in.
Source: entries/2026/03/12/awscloudtrail-latest-userguide-cloudtrail-event-reference-aws-console-sign-in-ev.md
JSON