github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/cloudwatch/AVD-AWS-0017/CloudFormation.md (about) 1 2 Enable CMK encryption of CloudWatch Log Groups 3 4 ```yaml--- 5 Resources: 6 GoodExample: 7 Type: AWS::Logs::LogGroup 8 Properties: 9 KmsKeyId: "arn:aws:kms:us-west-2:111122223333:key/lambdalogging" 10 LogGroupName: "aws/lambda/goodExample" 11 RetentionInDays: 30 12 13 ``` 14 15