diff --git a/configs/cloudformation/stack_template.yml b/configs/cloudformation/stack_template.yml
index 91f372fdb..320f5e13d 100644
--- a/configs/cloudformation/stack_template.yml
+++ b/configs/cloudformation/stack_template.yml
@@ -262,6 +262,14 @@ Conditions:
   CreateLogStashCond: !Not [!Equals [!Ref LogStashDbHost, ""]]
 
 Resources:
+  # CloudWatch log group for the SSH logs of ECS "container instances" (confusing term for the EC2
+  # instances that run the container runtime and host ECS OCI containers)
+  SSHLogGroup:
+    Type: AWS::Logs::LogGroup
+    Properties:
+      LogGroupName: /ecs/container-instance-ssh-logs
+      RetentionInDays: 7
+
   LoadBalancerStack:
     Type: AWS::CloudFormation::Stack
     Properties: