Cloudwatch loggroups should be encrypted
High
Security
HIPAA,PCIDSS,GDPR,CISAWS,CBP,NIST,SOC2,AWSWAF,SEBI,RBI_UCB
Using Console
Cloudwatch Log groups are by default encrypted with AWS KMS Keys
Using CLI
Using Python
Reference Link