Create a VPC endpoint for CloudWatch

[kunduso]

After moving the Lambda function inside a VPC, access to the CloudWatch Logs will require an endpoint since the VPC does not have an Internet Gateway.