diff --git a/website/source/docs/providers/aws/r/cloudtrail.html.markdown b/website/source/docs/providers/aws/r/cloudtrail.html.markdown
new file mode 100644
index 0000000000..d4ba604fc7
--- /dev/null
+++ b/website/source/docs/providers/aws/r/cloudtrail.html.markdown
@@ -0,0 +1,75 @@
+---
+layout: "aws"
+page_title: "AWS: cloudtrail"
+sidebar_current: "docs-aws-resource-cloudtrail"
+description: |-
+  Provides a CloudTrail resource.
+---
+
+# aws\_cloudtrail
+
+Provides a CloudTrail resource.
+
+## Example Usage
+```
+resource "aws_cloudtrail" "foobar" {
+    name = "tf-trail-foobar"
+    s3_bucket_name = "${aws_s3_bucket.foo.id}"
+    s3_key_prefix = "/prefix"
+    include_global_service_events = false
+}
+
+resource "aws_s3_bucket" "foo" {
+    bucket = "tf-test-trail"
+    force_destroy = true
+    policy = <<POLICY
+{
+    "Version": "2012-10-17",
+    "Statement": [
+        {
+            "Sid": "AWSCloudTrailAclCheck",
+            "Effect": "Allow",
+            "Principal": "*",
+            "Action": "s3:GetBucketAcl",
+            "Resource": "arn:aws:s3:::tf-test-trail"
+        },
+        {
+            "Sid": "AWSCloudTrailWrite",
+            "Effect": "Allow",
+            "Principal": "*",
+            "Action": "s3:PutObject",
+            "Resource": "arn:aws:s3:::tf-test-trail/*",
+            "Condition": {
+                "StringEquals": {
+                    "s3:x-amz-acl": "bucket-owner-full-control"
+                }
+            }
+        }
+    ]
+}
+POLICY
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `name` - (Required) Specifies the name of the trail.
+* `s3_bucket_name` - (Required) Specifies the name of the S3 bucket designated for publishing log files.
+* `s3_key_prefix` - (Optional) Specifies the S3 key prefix that precedes
+    the name of the bucket you have designated for log file delivery.
+* `cloud_watch_logs_role_arn` - (Optional) Specifies the role for the CloudWatch Logs
+    endpoint to assume to write to a user’s log group.
+* `cloud_watch_logs_group_arn` - (Optional) Specifies a log group name using an Amazon Resource Name (ARN),
+    that represents the log group to which CloudTrail logs will be delivered.
+* `include_global_service_events` - (Optional) Specifies whether the trail is publishing events
+    from global services such as IAM to the log files. Defaults to `true`.
+* `sns_topic_name` - (Optional) Specifies the name of the Amazon SNS topic
+    defined for notification of log file delivery.
+
+## Attribute Reference
+
+The following attributes are exported:
+
+* `id` - The name of the trail.
diff --git a/website/source/layouts/aws.erb b/website/source/layouts/aws.erb
index 29f2f54cbc..f68dbeb6d5 100644
--- a/website/source/layouts/aws.erb
+++ b/website/source/layouts/aws.erb
@@ -19,6 +19,15 @@
                     </ul>
                 </li>
 
+                <li<%= sidebar_current(/^docs-aws-resource-cloudtrail/) %>>
+                    <a href="#">CloudTrail Resources</a>
+                    <ul class="nav nav-visible">
+                        <li<%= sidebar_current("docs-aws-resource-cloudtrail") %>>
+                            <a href="/docs/providers/aws/r/cloudtrail.html">aws_cloudtrail</a>
+                        </li>
+                    </ul>
+                </li>
+
                 <li<%= sidebar_current(/^docs-aws-resource-cloudwatch/) %>>
                     <a href="#">CloudWatch Resources</a>
                     <ul class="nav nav-visible">