aws logs put-data-protection-policy
Creates a data protection policy for the specified log group. AWS CLI reference
2 options Its page in the AWS CLI reference
Options
--log-group-identifierSpecify either the log group name or log group ARN.--policy-documentSpecify the data protection policy, in JSON.