I see you can enable logging properties as shown in the documentation:
But it does not specify whether or not you can enable audit logging to Cloudwatch when building a Redshift cluster on Cloudformation. It only specifies properties for an S3 bucket to write to. Is this something that has to be enabled via API/CLI/Console?