diff --git a/rules/cloudTrail.js b/rules/cloudTrail.js
index <HASH>..<HASH> 100644
--- a/rules/cloudTrail.js
+++ b/rules/cloudTrail.js
@@ -17,7 +17,14 @@ module.exports.config = {
       "detail": {
         "eventSource": [
           "cloudtrail.amazonaws.com"
-        ]
+        ],
+      "eventName": [
+        "CreateTrail",
+        "DeleteTrail",
+        "StartLogging",
+        "StopLogging",
+        "UpdateTrail"
+      ]
       }
     }
   }
Specifies CloudTrail CloudWatch events

Changes CloudTrail CloudWatch event JSON from all events to a
specified array of events.