{"id":"cloudtrail-lake-sql-dot-notation-nested-fields","text":"CloudTrail Lake uses SQL syntax with dot-notation for nested fields (e.g., `userIdentity.arn`) and queries run against event data stores identified by their ARN-derived ID.","truth_value":"IN","source":"entries/2026/03/12/awscloudtrail-latest-userguide-query-create-edit-queryhtml.md","source_url":"","source_hash":"7cc1c9bfd31c27c7","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"cloudtrail-lake-sql-dot-notation-nested-fields","truth_value":"IN","reason":"premise"}]}}