diff --git a/cloudtrail/cloudwatch.tf b/cloudtrail/cloudwatch.tf
index 6d2b6d3..d533b05 100644
--- a/cloudtrail/cloudwatch.tf
+++ b/cloudtrail/cloudwatch.tf
@@ -24,8 +24,8 @@ resource "aws_cloudwatch_log_group" "this" {
   name = local.name
 
   #  kms_key_id        = var.kms_key_id
-  #  kms_key_id        = var.kms_key_arn
-  kms_key_id        = data.aws_kms_key.incoming_key.id
+  kms_key_id = var.kms_key_arn
+  # kms_key_id        = data.aws_kms_key.incoming_key.id
   retention_in_days = 7
 
   tags = merge(