Following CLOUDWATCH Controls are implemented:

1. aws-cloudwatch-m-1: CloudWatch log data should be encrypted with customer managed keys (CMK).