Review sensitive data in log events and adjust Cloudwatch log protection (or however it's called) as needed

For example, login lambda:

<img width="1386" height="256" alt="Image" src="https://github.com/user-attachments/assets/e0aeaeaf-287d-4727-a9e6-c913b1c7e18a" />