It's been a while since I've used CloudWatch myself. How would you expect this? IE would you lean more towards having a lambda/firehose that forwards events to to the API (which is [public](https://tailstream.io/docs/api) by the way!) or would you expect some kind of agent / connector to run that automatically pulls the logs from CloudWatch?
I do not have any specific perspective on how this is best done. I believe being able to run inside a closed environment might be preferable, logs do contain pretty sensitive stuff. Perhaps a container that pulls from CloudWatch might be an option?