EnableCloudTrail === $$$

[zscgeek]

The default setting of EnableCloudTrail=True is dangerous and can cause a major AWS bill. AWS Cloud Trail is free for 1 subscription but this stack will add a new global subscription each time it's deployed. If you deploy the stack to more then one region you end up with several trails active all charging you $$$ after the first one. Additionally if the org already had cloudtrail enabled (for example they have AWS Control Tower enabled) you cause AWS charges out of the gate.