**Understanding AWS Access Data Retention Controls**
AWS access data retention controls let you define how long AWS keeps records of who accessed what, when, and from where. These controls cover CloudTrail logs, CloudWatch metrics, S3 access logs, and IAM credential reports. Without tuned retention policies, old access history can vanish