Advanced AI Prompt for AWS IAM Policy for CloudWatch Logs with Log Group Restriction

Act as a Cloud Observability Security Engineer. Generate a strict JSON IAM policy for an application executing in AWS that requires authorization to emit telemetry to CloudWatch Logs. Restrict the `logs:CreateLogStream` and `logs:PutLogEvents` actions exclusively to the specific log group ARN: `arn:aws:logs:[REGION]:[ACCOUNT_ID]:log-group:[LOG_GROUP_NAME]:*`. Explicitly omit the `logs:CreateLogGroup` permission to prevent the application from arbitrarily creating new log groups, and omit all deletion permissions. This guarantees the application cannot interfere with, overwrite, or pollute the logging streams of other microservices operating in the same account.