Query: kms_keys_for_cloudwatch_log_group

select
  kms_key_id
from
  aws_cloudwatch_log_group
where
  kms_key_id is not null
  and arn = $1
  and region = split_part($1, ':', 4)
  and account_id = split_part($1, ':', 5);