Storing EKS logs in cloudwatch

Hi team,

We are preparing for soc II. As suggested by vanta we have enabled all the control plane logs in EKS such as API server logs, Audit logs, Authenticator logs, Controller manager logs, Scheduler logs. Even though we have a small EKS cluster, there are lot of logs generated and gets stored in cloudwatch log groups. This increased our cloudwatch cost. what is the recommended retention period for these logs? Do you have any suggestions to reduce the cost?