AWS CloudWatch: CloudWatch Log Group with KMS Encryption

My Saved Presets

This template creates a log group that retains events for 7 days and is encrypted with a new KMS key that is created in the template.

Description
Enabled
EnableKeyRotation

KeySpec SYMMETRIC_DEFAULT ECC_NIST_P256 ECC_NIST_P384 ECC_NIST_P521 ECC_SECG_P256K1 HMAC_224 HMAC_256 HMAC_384 HMAC_512 RSA_2048 RSA_3072 RSA_4096 SM2 SYMMETRIC_DEFAULT
KeyUsage ENCRYPT_DECRYPT ENCRYPT_DECRYPT GENERATE_VERIFY_MAC SIGN_VERIFY

CloudWatch Log Group with KMS Encryption