Allow to specify specific namespaces and/or node selectors to watch

Is there a way to either whitelist/blacklist namespaces from collecting/sending logs, and or only specific nodes?

Also is there a way to provide an expiration on the log groups that get automatically created?

The issue names no specific files, tests, or entry points. Start by reviewing the repository's Kubernetes YAML templates and CloudWatch Agent Dockerfile, then trace how log collection and automatically created log groups are configured; completion would require agreed namespace or node filtering and log-group expiration behavior.

Written by the indexing model from the issue text.