github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/cloudwatch/AVD-AWS-0017/Terraform.md (about) 1 2 Enable CMK encryption of CloudWatch Log Groups 3 4 ```hcl 5 resource "aws_cloudwatch_log_group" "good_example" { 6 name = "good_example" 7 8 kms_key_id = aws_kms_key.log_key.arn 9 } 10 11 ``` 12 13 #### Remediation Links 14 - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudwatch_log_group#kms_key_id 15