Posture check: AWS CloudTrail logs are not encrypted using Customer Master Keys (CMKs)
Query: ```config from cloud.resource where api.name='aws-cloudtrail-describe-trails' AND cloud.type = 'aws' AND json.rule = 'kmsKeyId does not exist'```