updated for cloudwatch logs