req: Object Level Logging enabled with 7 year retention on CloudWatch Log Group

[badra001]

#1 We need to define the logging group structure, perhaps something like /boc/s3-object/t26/{bucket_name}, along with the retention. But, shoudl the retention be in AWS, in Splunk, on prem? How do we do a copy of these logs into some sort of logging system, and what is that system?