cloudtrail-sse-kms-enabled-by-default

Status: IN

CloudTrail trail log file encryption uses SSE-KMS by default (not SSE-S3) when creating a trail.

Source: entries/2026/03/12/awscloudtrail-latest-userguide-cloudtrail-create-a-trail-using-the-console-first.md