aws cloudtrail describe-trails
=>
{
    "trailList": [
        {
            "Name": "DTQCTrailDemo",
            "S3BucketName": "aws-dtq-cloudtrail-logs-<AWS_ACCID!!!>-e5c21b44",
            "IncludeGlobalServiceEvents": true,
            "IsMultiRegionTrail": true,
            "HomeRegion": "us-east-1",
            "TrailARN": ...
        }
    ]
}

aws cloudtrail validate-logs --trail-arn arn:aws:cloudtrail:us-east-1:<AWS_ACCID!!!>:trail/DTQCTrailDemo --start-time 2022-02-21T06:09:00Z --verbose
=>
Validating log files for trail arn:aws:cloudtrail:us-east-1:<AWS_ACCID!!!>:trail/DTQCTrailDemo between 2022-02-21T06:09:00Z and 2022-02-21T07:51:54Z
Digest file     s3://aws-dtq-cloudtrail-logs-<AWS_ACCID!!!>-e5c21b44/AWSLogs/<AWS_ACCID!!!>/CloudTrail-Digest/us-east-1/2022/02/21/<AWS_ACCID!!!>_CloudTrail-Digest_us-east-1_DTQCTrailDemo_us-east-1_20220221T065548Z.json.gz        valid
1/1 digest files valid

aws cloudtrail create-trail --name DTQCTrailDemo --s3-bucket-name <BUCKET MUST EXIST!!!> --is-multi-region-trail --enable-log-file-validation
=>     
{
    "Name": "DTQCTrailDemo",
    "S3BucketName": ...
}
aws cloudtrail start-logging --name DTQCTrailDemo
aws cloudtrail get-trail-status --name DTQCTrailDemo
=>     
{
    "IsLogging": true,
    "StartLoggingTime": "2022-02-21T17:12:30.511000+09:00",
    "LatestDeliveryAttemptTime": "",
    "LatestNotificationAttemptTime": "",
    "LatestNotificationAttemptSucceeded": "",
    "LatestDeliveryAttemptSucceeded": "",
    "TimeLoggingStarted": "2022-02-21T08:12:30Z",
    "TimeLoggingStopped": ""
}

aws cloudtrail get-trail-status --name DTQCTrailDemo
=>     
{
    "IsLogging": true,
    "LatestDeliveryTime": "2022-02-21T16:56:00.818000+09:00",
    "StartLoggingTime": "2022-02-21T15:55:48.373000+09:00",
    "LatestCloudWatchLogsDeliveryTime": "2022-02-21T16:57:40.916000+09:00",
    "LatestDigestDeliveryTime": "2022-02-21T16:45:24.875000+09:00",
    "LatestDeliveryAttemptTime": "2022-02-21T07:56:00Z",
    ...
}
aws cloudtrail stop-logging --name DTQCTrailDemo
aws cloudtrail get-trail-status --name DTQCTrailDemo
=>     
{
    "IsLogging": false,
    "LatestDeliveryTime": "2022-02-21T16:56:00.818000+09:00",
    "StartLoggingTime": "2022-02-21T15:55:48.373000+09:00",
    "StopLoggingTime": "2022-02-21T16:59:24.934000+09:00",
    "LatestCloudWatchLogsDeliveryTime": "2022-02-21T16:57:40.916000+09:00",
    "LatestDigestDeliveryTime": "2022-02-21T16:45:24.875000+09:00",
    "LatestDeliveryAttemptTime": "2022-02-21T07:56:00Z",
    ...
}

terraform$ terraform init && terraform apply -auto-approve
=> Apply complete! Resources: 3 added, 0 changed, 0 destroyed.
terraform destroy -auto-approve
=> Plan: 0 to add, 0 to change, 3 to destroy.