diff --git a/aws/logs_monitoring/template.yaml b/aws/logs_monitoring/template.yaml
index e82a84fc..dac607df 100644
--- a/aws/logs_monitoring/template.yaml
+++ b/aws/logs_monitoring/template.yaml
@@ -658,9 +658,10 @@ Resources:
       Action: lambda:InvokeFunction
       Principal: !If
         - IsAWSChina
-        - !Sub "logs.${AWS::Region}.amazonaws.com.cn"
-        - !Sub "logs.${AWS::Region}.amazonaws.com"
+        - !Sub "logs.amazonaws.com.cn"
+        - !Sub "logs.amazonaws.com"
       SourceAccount: !Ref "AWS::AccountId"
+      SourceArn: !Sub "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:*:*"
   S3Permission:
     Type: AWS::Lambda::Permission
     Properties: