Status: IN
MFA authentication status is recorded in CloudTrail logs at `sessionContext.attributes.mfaAuthenticated` (true/false).
Source: entries/2026/03/11/IAM-latest-UserGuide-cloudtrail-integrationhtml.md
JSON