Best way to securely share CloudWatch logs with another AWS account without exposing sensitive information

Hi All,

We need to share logs with another AWS account for Monitoring purpose using Cross account observability, but the logs contain sensitive information that cannot be exposed.

I'm aware of CloudWatch Logs Data Protection, which can identify and mask sensitive data (for example, replacing detected values with ***).

Are there any other AWS-native approaches or best practices for securely sharing logs across AWS accounts while ensuring sensitive information is not exposed? If there is an AI tool or something’s?

Any guidance or best practices would be appreciated.