CloudWatch Logs Gets Account-Level Retention Policies
AWS just rolled out account-level retention policies for CloudWatch Logs, letting you enforce log retention rules across your entire account or specific log group prefixes without manual per-group management. Now your platform and security teams can set baseline policies (like 90 days) with exceptions for compliance needs (like 1-year for /security logs), available in all commercial regions except Middle East locations.
source: [aws/whats-new]