github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/aws/cloudwatch/AVD-AWS-0017/CloudFormation.md (about) 1 2 Enable CMK encryption of CloudWatch Log Groups 3 4 ```yaml--- 5 Resources: 6 GoodExample: 7 Type: AWS::Logs::LogGroup 8 Properties: 9 KmsKeyId: "arn:aws:kms:us-west-2:111122223333:key/lambdalogging" 10 LogGroupName: "aws/lambda/goodExample" 11 RetentionInDays: 30 12 13 ``` 14 15