Status: IN
KMS events (Encrypt, Decrypt, GenerateDataKey) typically generate over 99% of CloudTrail events; filtering these via advanced event selectors is a key cost optimization.
Source: entries/2026/03/12/awscloudtrail-latest-userguide-cloudtrail-lake-conceptshtml.md