Fix secret tags and logs for the AWS deployer (#4056)

* Fix secret tags and logs for the AWS deployer

* Fix linter

Author: stefannica

src/zenml/integrations/aws/deployers/aws_deployer.py

@@ -582,6 +582,9 @@ def _create_or_update_secret(
                 response = self.secrets_manager_client.update_secret(
                     SecretId=secret_name,
                     SecretString=secret_value,
+                )
+                self.secrets_manager_client.tag_resource(
+                    SecretId=response["ARN"],
                     Tags=self.get_tags(deployment, settings),
                 )
                 logger.debug(f"Updated existing secret {secret_name}")
@@ -1619,14 +1622,17 @@ def do_get_deployment_state_logs(
                 deployment
             )
             service_name = existing_metadata.service_name
-            if not service_name:
+            service_id = existing_metadata.service_id
+            if not service_name or not service_id:
                 raise RuntimeError(
-                    f"Service name not found in deployment metadata for "
+                    f"Service name or ID not found in deployment metadata for "
                     f"deployment '{deployment.name}'"
                 )
 
             # App Runner automatically creates CloudWatch log groups
-            log_group_name = f"/aws/apprunner/{service_name}/service"
+            log_group_name = (
+                f"/aws/apprunner/{service_name}/{service_id}/application"
+            )
 
             try:
                 streams_response = self.logs_client.describe_log_streams(