CloudWatch logs written by AWS Glue can be encrypted. Encryption is considered best practice and can help protect sensitive data. Encryption is also often required by compliance regulations.
In AWS Console -
In Terraform -
References:
https://docs.aws.amazon.com/glue/latest/dg/encryption-security-configuration.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/glue_security_configuration#encryption_configuration