diff --git a/security/cloudtrail.yaml b/security/cloudtrail.yaml
index 74940bacc..15c3f10d7 100644
--- a/security/cloudtrail.yaml
+++ b/security/cloudtrail.yaml
@@ -225,8 +225,8 @@ Resources:
             Condition:
               StringNotEquals:
                 's3:x-amz-server-side-encryption': [
-                  'AES256',
-                  'aws:kms'
+                  "AES256",
+                  "aws:kms"
                 ],
                 's3:x-amz-server-side-encryption-aws-kms-key-id': {'Fn::ImportValue': !Sub '${ParentKmsKeyStack}-KeyArn'}
           - !Ref 'AWS::NoValue'