On the Logging & Reporting > Log Settings > CloudWatch tab you can forward all log files to Amazon CloudWatch. CloudWatch is an AWS service that monitors all your resources and applications in Amazon Web Services (AWS) and any custom applications or services like Sophos UTM on AWS. Enabling this option forwards all Sophos UTM on AWS log files in real-time.
To activate logging to CloudWatch, you need to have an AWS profile created on Definitions & Users > AWS Profiles > Profiles and selected it under AWS Profile Settings.
AWS Profile Settings
You can select the AWS profile which communicates with the Amazon CloudWatch service.
Note – How to create an AWS profile is described on Definitions & Users > AWS Profiles.