AWS::CloudTrail::Trail:

Properties: 
  CloudWatchLogsLogGroupArn: "\"arn:xxxx\""
  CloudWatchLogsRoleArn: "\"arn:xxx\""
  EnableLogFileValidation: true
  IncludeGlobalServiceEvents: true
  IsLogging: true
  IsMultiRegionTrail: true
  KMSKeyId: "\"kms-key-id\""
  S3BucketName: "\"bucket-name\""
  S3KeyPrefix: "\"prefix-name\""
  SnsTopicName: "\"sns-topic-name\""
  Tags: |
    [
      {
        "Key" => "tag-key",
        "Value" => "tag-value"
      }
    ]