# AwsCloudTrail resources in ASFF
<a name="asff-resourcedetails-awscloudtrail"></a>

The following are examples of the Amazon Security Finding Format (ASFF) syntax for `AwsCloudTrail` resources.

Amazon Security Hub CSPM normalizes findings from various sources into ASFF. For background information about ASFF, see [Amazon Security Finding Format (ASFF)](securityhub-findings-format.md).

## AwsCloudTrailTrail
<a name="asff-resourcedetails-awscloudtrailtrail"></a>

The `AwsCloudTrailTrail` object provides details about a Amazon CloudTrail trail.

The following is an example `AwsCloudTrailTrail` finding in the Amazon Security Finding Format (ASFF). To view descriptions of `AwsCloudTrailTrail` attributes, see [AwsCloudTrailTrailDetails](https://docs.amazonaws.cn/securityhub/1.0/APIReference/API_AwsCloudTrailTrailDetails.html) in the *Amazon Security Hub API Reference*.

**Example**

```
"AwsCloudTrailTrail": {
    "CloudWatchLogsLogGroupArn": "arn:aws-cn:logs:us-west-2:123456789012:log-group:CloudTrail/regression:*",
    "CloudWatchLogsRoleArn": "arn:aws-cn:iam::866482105055:role/CloudTrail_CloudWatchLogs",
    "HasCustomEventSelectors": true,
    "HomeRegion": "us-west-2",
    "IncludeGlobalServiceEvents": true,
    "IsMultiRegionTrail": true,
    "IsOrganizationTrail": false,
    "KmsKeyId": "kmsKeyId",
    "LogFileValidationEnabled": true,
    "Name": "regression-trail",
    "S3BucketName": "cloudtrail-bucket",
    "S3KeyPrefix": "s3KeyPrefix",
    "SnsTopicArn": "arn:aws-cn:sns:us-east-2:123456789012:MyTopic",
    "SnsTopicName": "snsTopicName",
    "TrailArn": "arn:aws-cn:cloudtrail:us-west-2:123456789012:trail"
}
```