Status: IN
CloudTrail Lake attaches resource-based policies (not identity-based policies) to event data stores and dashboards to grant itself permission to run automated queries and refreshes.
Source: entries/2026/03/12/awscloudtrail-latest-userguide-lake-dashboard-highlightshtml.md