github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/aws/cloudwatch/AVD-AWS-0017/Terraform.md (about) 1 2 Enable CMK encryption of CloudWatch Log Groups 3 4 ```hcl 5 resource "aws_cloudwatch_log_group" "good_example" { 6 name = "good_example" 7 8 kms_key_id = aws_kms_key.log_key.arn 9 } 10 11 ``` 12 13 #### Remediation Links 14 - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group#kms_key_id 15