AWS just introduced a helpful new capability in Amazon CloudWatch: you can now enable deletion protection on your log groups
Yes, it does.
Yes, it does.