diff --git a/vpc-flow-logs.tf b/vpc-flow-logs.tf
index 7711af31a..1940d8063 100644
--- a/vpc-flow-logs.tf
+++ b/vpc-flow-logs.tf
@@ -109,6 +109,6 @@ data "aws_iam_policy_document" "vpc_flow_log_cloudwatch" {
       "logs:DescribeLogStreams",
     ]
 
-    resources = ["arn:aws:logs:*:*:log-group:${var.flow_log_cloudwatch_log_group_name_prefix}${local.flow_log_cloudwatch_log_group_name_suffix}/*"]
+    resources = ["arn:aws:logs:*:*:log-group:${var.flow_log_cloudwatch_log_group_name_prefix}${local.flow_log_cloudwatch_log_group_name_suffix}:*"]
   }
 }