diff --git a/cloudtrail/cloudwatch.tf b/cloudtrail/cloudwatch.tf
index 355bc17..cd63f14 100644
--- a/cloudtrail/cloudwatch.tf
+++ b/cloudtrail/cloudwatch.tf
@@ -1,6 +1,6 @@
 locals {
   cloudwatch_prefix        = replace(aws_cloudwatch_log_group.this.arn, "/:\\*$/", "")
-  cloudwatch_suffix        = format("%v_CloudTrail_%v", local.account_id, local.region)
+  cloudwatch_suffix        = format("%v_CloudTrail_%v*", local.account_id, local.region)
   org_cloudwatch_suffix    = format("%v_*", var.organization_id)
   cloudwatch_resources     = join(":", [local.cloudwatch_prefix, "log-stream", local.cloudwatch_suffix])
   org_cloudwatch_resources = var.enable_organization ? join(":", [local.cloudwatch_prefix, "log-stream", local.org_cloudwatch_suffix]) : null