select
count(*) as "Count",
type_name as "EventType",
api.operation as "Operation",
status as "Status"
from "amazon_security_lake_glue_db_<Region>"."amazon_security_lake_table_<Region>_cloud_trail_mgmt_2_0"
WHERE time_dt BETWEEN CURRENT_TIMESTAMP - INTERVAL '1' DAY AND CURRENT_TIMESTAMP
group by api.operation, status, type_name
order by count(*) desc