SBT control plane: Configure cloudwatch logs role for API Gateway service

[ujwalbukka]

Describe the feature

For the SBT control plane rest api add the feature to configure cloudwatch logs role for API Gateway service and also provide a way to opt out.

Use Case

When SBT control plane is deployed in a new AWS account we get below error

CloudWatch Logs role ARN must be set in account settings to enable logging (Service: ApiGateway, Status Code: 400

Proposed Solution

1. Update the control plane rest api cdk construct to pass cloudWatchRole: true.
2. Provide this functionality in a such way that if someone wants to opt out should be able to do it easily.

Other Information

No response

Acknowledgements

• [ ] I may be able to implement this feature request
• [ ] This feature might incur a breaking change

CDK version used

2.123.0

Environment details (OS name and version, etc.)

Linux