{
    "name": "logGroupNotEncryptedWithKms",
    "file": "logGroupNotEncryptedWithKms.rego",
    "policy_type": "aws",
    "resource_type": "aws_cloudwatch",
    "template_args": null,
    "severity": "HIGH",
    "description": "AWS CloudWatch log group is not encrypted with a KMS CMK",
    "reference_id": "AWS.CloudWatch.EncryptionandKeyManagement.High.0632",
    "category": "Data Protection",
    "id": "AC_AWS_0451",
    "version": 2
}