AWS Credential Access via GetPasswordData

The analytic identifies `GetPasswordData` API calls in AWS CloudTrail logs from Amazon Security Lake. This activity is significant as it indicates an attempt to retrieve encrypted administrator passwords for running Windows instances. Attackers could gain unauthorized access to administrative credentials, potentially leading to full control over affected instances and further compromise of the AWS environment.