aws logs put-destination-policy
Creates or updates an access policy associated with an existing destination. AWS CLI reference
3 options Its page in the AWS CLI reference
Options
--access-policyAn IAM policy document that authorizes cross-account users to deliver their log events to the associated destination.--destination-nameA name for an existing destination.--force-updateSpecify true if you are updating an existing destination policy to grant permission to an organization ID instead of granting permission to individual Amazon Web Services accounts.