In order to fulfill security requirements by my customer, I have to encrypt each logGroup with a KMS key and have to tag it according the requirement. But as I found, only logGroups of access logs can be reached by the logical ID “ApiGatewayLogGroup”. Execution logs as enabled by provider.logs.restApi.executionLogging are managed by ApiGateway and have no logical ID that I can find. Is there any possibility to provide a KMS key or tag to the logGroup created for Execution-Logs like API-Gateway-Execution-Logs_xxxxxx?
serverless.yml
provider:
name: aws
runtime: nodejs14.x
…
logs:
restApi:
executionLogging: true
fullExecutionData: false
accessLogging: true
level: INFO