Status: IN
DynamoDB control plane events (CreateTable, DeleteTable, UpdateTable) are logged by CloudTrail by default; data plane events (GetItem, PutItem, Query, Scan) require explicit enablement.
Source: entries/2026/03/11/amazondynamodb-latest-developerguide-logging-using-cloudtrailhtml.md