dd-elb-log-bucket-policy

{
    "Version": "2012-10-17",
    "Id": "AWSConsole-AccessLogs-Policy-1513731370170",
    "Statement": [
        {
            "Sid": "AWSConsoleStmt-1513731370170",
            "Effect": "Allow",
            "Principal": {
                "AWS": "arn:aws:iam::OWNERACOUNTID:root"
            },
            "Action": "s3:PutObject",
            "Resource": "arn:aws:s3:::MYBUCKET1/AWSLogs/MYACOUNTID/*"
        }
    ]
}