Status: IN
The CloudTrail Lake federation IAM role trust policy must allow `lakeformation.amazonaws.com` to assume it via `sts:AssumeRole`.
Source: entries/2026/03/12/awscloudtrail-latest-userguide-query-federationhtml.md
JSON