Encrypt CloudWatch loggroup using CMK

I want to encrypt the CloudWatch log group that is automatically created during Lambda function creation. I cannot create the resource as it complains presence of the resource.

Anyone who have addressed this?