Authored a new CloudWatch Log Group with configurable retention plus a metric filter and alarm on ERROR-level log lines to satisfy the centralized, searchable logging and alerting requirement; written as Terraform resources but never applied against a real account.
Partly done
