This is a CDK project that set up centralized logging to an S3 bucket via a Kinesis Firehose. The solution allows you to specify trusted accounts for different regions or principalOrgIds and regions and then will configure the CloudWatch Log Delivery Endpoint with proper permissions in those regions
Solution is based heavily on Centralize Cloudwatch Log with CDK
npm run build
compile typescript to jscdk deploy -c account=<your_account> -c region=<your_region> -c trustedAccounts=<accountId>:<region>,<accountId>:<region>,...
orcdk deploy -c account=<your_account> -c region=<your_region> -c principalOrgIds=<orgId>,<orgId>,... -c regions=<region>,<region>,..