Per-customer forensics: enter an AWS account id to see every backend/branch id that was minted for that customer and its lifecycle (create / delete). The optional date range filters on updatedAt — the last-activity time (create or delete) — as a server-side GSI key-condition, so it's cheap.