We have a scenario, where an event bridge bus with Cloud watch logs as target is set up for the first time in an account.
From AWS documentation we understand that cloud watch logs resource policy is needed to let events service PUT records to logs. Is there a way to add statements to existing policy?