# yaml-language-server: $schema=../../../schemas/@aws-mdaa/audit-trail.json
# Named CloudTrail trails to deploy
trails:
  # Default trail for S3 data event auditing
  s3-audit:
    # The name of the bucket to which audit events will be written
    cloudTrailAuditBucketName: ssm-domain:/audit/bucket/name
    # The ARN of the KMS key which will be used to encrypt audit logs
    cloudTrailAuditKmsKeyArn: ssm-domain:/audit/kms/arn
    # Include management/control plane events in the trail
    includeManagementEvents: true