An admin identity signed in to the console from a region it has never used, with no matching MFA history. Hunter could not confirm the device; the case is paused for a human identity check.
What happened
13:48◆ Observer
Console sign-in for an admin identity from Singapore