Currently, the RedshiftCluster resource only allows audit logging to go to S3, but the feature is available to send them to CloudWatch. The AWSSDK also supports this in the EnableLoggingRequest model. I would like to set the CloudWatch logging from CloudFormation, but can't do it yet.