[Feature] Add clodwatch log_group KMS encryption and retention policy

[ichasco-heytrade]

Describe the Feature

It would be nice to be able to encrypt with KMS the clodwatch log_groups and manage the retention policy

Expected Behavior

Could manage retention policy and log_group encryption from cloudwatch

Use Case

These are AWS security best practices