Status: IN
Organization trail CloudWatch log stream resource ARNs use the `o-<orgid>_*` prefix pattern, requiring separate resource entries in the IAM policy alongside the standard account-based entries.
Source: entries/2026/03/12/awscloudtrail-latest-userguide-cloudtrail-required-policy-for-cloudwatch-logshtm.md
JSON