Role Policy Document for CloudTrail to Use CloudWatch Logs for Monitoring