Amazon CloudWatch Logs now have added KMS Encryption support

Amazon CloudWatch has now added a new support for CloudWatch Logs which is KMS Encryption that will allow you to encrypt the logs utilizing the keys managed via the AWS Key Management Service and Customer Master Key. When you are creating the log group the encryption is enabled at the log group level by integrating with CMK with a log group. After it is integrated with CMK with the log group a newly ingested data for the log group will be encrypted by using the CMK. The data will be stored in the encrypted format till the retention period. You can decrypt the data via CloudWatch Logs upon request.