diff --git a/stacksets/datadog-shipping/logs-template.yaml b/stacksets/datadog-shipping/logs-template.yaml
index 1611b26..2fe23b0 100644
--- a/stacksets/datadog-shipping/logs-template.yaml
+++ b/stacksets/datadog-shipping/logs-template.yaml
@@ -165,7 +165,7 @@ Resources:
           {
             "Effect": "Allow",
             "Principal": {
-              "Service": "logs.${AWS::Region}.amazonaws.com"
+              "AWS": "*"
             },
             "Action": "logs:PutSubscriptionFilter",
             "Resource": "arn:${AWS::Partition}:logs:${AWS::Region}:${AWS::AccountId}:destination:DATADOG-LOGS-FIREHOSE",