aws logs put-account-policy
Creates an account-level data protection policy, subscription filter policy, field index policy, transformer policy, metric extraction policy, or retention policy that applies to all log groups, a subset of log groups, or a data source name and type combination in the account. AWS CLI reference
6 options Its page in the AWS CLI reference
Options
--dry-runSpecifies whether to preview the impact of the policy without creating or updating it.--policy-documentSpecify the policy, in JSON.--policy-nameA name for the policy.--policy-typeThe type of policy that you're creating or updating.--scopeCurrently the only valid value for this parameter is ALL, which specifies that the data protection policy applies to all log groups in the account.--selection-criteriaUse this parameter to apply the new policy to a subset of log groups in the account or a data source name and type combination.