Worked on the UKHomeOffice/core-cloud-terraform-modules repository to deliver organization-wide enhancements for CloudWatch Logs destination policies, enabling cross-account subscription filters within AWS Organizations. Refactored the destination module’s access policy logic to remove redundancy and improve clarity, while modernizing policy encoding by adopting jsonencode for both organization-wide and account-based policies. Addressed issues in the cw-logs-destination module to improve the reliability of log data routing across accounts. These infrastructure as code improvements, implemented using Terraform and HCL, reduced operational overhead, strengthened governance of log delivery, and accelerated onboarding of new member accounts, supporting scalable and secure cloud operations.