Data accesses are not monitored typically because security and governance teams don't know which instances to turn logging on and lack information about application dependencies to distinguish between authorized and unauthorized data accesses or to look for anomalies. Further, sheer volumes of interactions make monitoring unfeasible from a labor perspective.