Forward SSH logs from AWS EC2 instance to AWS CloudWatch Logs for external party to access

Scenario: A third party security agency hired by your boss or client wishes to monitor the SSH logs on the bastion host of your application. The bastion host is setup on an AWS EC2 instance. Instead of giving direct access to the bastion host for pulling the SSH logs in /var/log/auth.log, we can forward the …