github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/cloudtrail/AVD-AWS-0015/CloudFormation.md (about) 1 2 Enable encryption at rest 3 4 ```yaml--- 5 Resources: 6 BadExample: 7 Type: AWS::CloudTrail::Trail 8 Properties: 9 IsLogging: true 10 IsMultiRegionTrail: true 11 KmsKeyId: "alias/CloudtrailKey" 12 S3BucketName: "CloudtrailBucket" 13 S3KeyPrefix: "/trailing" 14 TrailName: "Cloudtrail" 15 16 ``` 17 18