Add cloudwatch input into AWS package for log collection

[kaiyan-sheng]

What does this PR do?

We have aws-cloudwatch input in Filebeat as a separate input but never been used in any fileset under AWS module. This PR is to add aws-cloudwatch as an option for users to ingest logs using AWS package.

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have verified that all data streams collect metrics or logs.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

How to test this PR locally

Related issues

• Closes Support AWS logs with cloudwatch input #2318

Screenshots

For Cloudtrail logs:

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2022-01-05T22:54:25.079+0000

• Duration: 28 min 56 sec

• Commit: 79e1227

Test stats 🧪

Test	Results
Failed	0
Passed	323
Skipped	0
Total	323

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

[P1llus]

@kaiyan-sheng If this is a new raw input package, can you add in a choice in the UI/menu for custom ingest pipeline as well? Similar to the TCP and UDP one.
Also are they not allowed to choose their datastream name similar to other input packages?

[kaiyan-sheng]

Hey @P1llus 👋 This PR is not adding aws-cloudwatch as a new raw input package. It's simply adopting it in logs data streams in the existing aws package. Good to know what I need to pay attention to when adding a new raw input package though! Thank you!!

[aspacca]

I would ask @endorama to review that all the titles/descriptions are following the new guidelines

but for that just minor discrepancies on the equivalent files for every data stream

[aspacca]

the equivalent files for elb_logs, firewall_logs and waf have enabled: false

[kaiyan-sheng]

Yep choose which input to be enabled by default is discussed in #2318.