Trail

Also written: kc-trail

A CloudTrail setting that sends API records to a bucket. Its log bucket needs the strongest protection, because attackers often try to delete the trail.