{
  "trigger_id": "a9bf980f05efa6bf07a78b9a1dfb33ca",
  "playbook_id": "",
  "suggestion_reason": "Recommended to enable CloudTrail logging",
  "description": "This CLI command requires 'cloudtrail:StartLogging' permission. Successful execution will enable logging for the respective CloudTrail.",
  "trigger_name": "Enable CloudTrail Logging",
  "automation_type": "command",
  "automation_id": "aws-cloudtrail-logging-start-enable-logging-quick-action",
  "alerts_filter": {
    "filter": {
      "OR": [
        {
          "SEARCH_FIELD": "matching_service_rule_id",
          "SEARCH_TYPE": "EQ",
          "SEARCH_VALUE": "674cfb15-a1cd-415b-b312-d41b3a096d83"
        }
      ]
    }
  }
}