Hello, when setting up ECS workpool in Prefect UI, I see that an Execution Role has to be defined to capture logs. And under cloudwatch log configuration, it specifies that Execution Role needs these permissions:

logs:CreateLogStream

,

logs:CreateLogGroup

, and

logs:PutLogEvents

. In AWS there is

AmazonECSTaskExecutionRolePolicy

that can be used but this role doesn't include

logs:CreateLogGroup

. Can someone please confirm that this is really needed?