generated: '2026-06-20'
method: derived
source: openapi/amazon-cloudtrail-openapi.yml, https://docs.aws.amazon.com/awscloudtrail/latest/APIReference/CommonParameters.html
standards:
  - id: aws-sigv4
    conforms: true
    evidence: CloudTrail requests are signed with AWS Signature Version 4 (see API Reference Common Parameters).
  - id: oauth2
    conforms: false
    evidence: No OAuth2 security scheme; authentication is AWS SigV4.
  - id: oidc
    conforms: false
  - id: rfc9457-problem-details
    conforms: false
    evidence: Errors use the AWS JSON error shape ({message}, x-amzn-ErrorType header), not application/problem+json.
  - id: json-api
    conforms: false
  - id: fhir-r4
    conforms: false
  - id: scim2
    conforms: false
  - id: odata
    conforms: false
  - id: fapi
    conforms: false
  - id: psd2
    conforms: false
  - id: cursor-pagination
    conforms: true
    evidence: List/lookup operations use NextToken/nextToken cursor tokens with MaxResults (LookupEvents, ListEventDataStores).
  - id: idempotency-key
    conforms: false
    evidence: No standard Idempotency-Key header; CreateTrail relies on name uniqueness (TrailAlreadyExistsException).
compliance_programs:
  - name: SOC 1/2/3
  - name: PCI DSS
  - name: HIPAA
  - name: FedRAMP
  - name: ISO 27001
    note: CloudTrail is in scope of AWS compliance programs; see https://aws.amazon.com/compliance/