diff --git a/README.md b/README.md
index 1b9868b1..48769db9 100644
--- a/README.md
+++ b/README.md
@@ -578,7 +578,7 @@ of the file that are supported are listed here.
 | cloudwatch-alarm                 | CloudWatchAlarm               | ✅ (Alarm Name)                        | ✅ (AlarmConfigurationUpdated Time)  | ❌    | ✅       |
 | cloudwatch-dashboard             | CloudWatchDashboard           | ✅ (Dashboard Name)                    | ✅ (LastModified Time)               | ❌    | ✅       |
 | cloudwatch-loggroup              | CloudWatchLogGroup            | ✅ (Log Group Name)                    | ✅ (Creation Time)                   | ❌    | ✅       |
-| cloudtrail                       | CloudtrailTrail               | ✅ (Trail Name)                        | ❌                                   | ❌    | ✅       |
+| cloudtrail                       | CloudtrailTrail               | ✅ (Trail Name)                        | ❌                                   | ✅    | ✅       |
 | codedeploy-application           | CodeDeployApplications        | ✅ (Application Name)                  | ✅ (Creation Time)                   | ❌    | ✅       |
 | config-recorders                 | ConfigServiceRecorder         | ✅ (Recorder Name)                     | ❌                                   | ❌    | ✅       |
 | config-rules                     | ConfigServiceRule             | ✅ (Rule Name)                         | ❌                                   | ❌    | ✅       |
diff --git a/aws/resources/cloudtrail.go b/aws/resources/cloudtrail.go
index 1c371f91..6970001c 100644
--- a/aws/resources/cloudtrail.go
+++ b/aws/resources/cloudtrail.go
@@ -23,6 +23,7 @@ func (ct *CloudtrailTrail) getAll(c context.Context, configObj config.Config) ([
 		for _, trailInfo := range page.Trails {
 			if configObj.CloudtrailTrail.ShouldInclude(config.ResourceValue{
 				Name: trailInfo.Name,
+				Tags: util.ConvertTypesTagsToMap(trailInfo.Tags),
 			}) {
 				trailIds = append(trailIds, trailInfo.TrailARN)
 			}