title: remove last part with cloudformation syntax
body: <p>I got an arn reference with <code>Fn::GetAtt: [ logGroup, Arn ]</code> </p>
  
  <pre><code>arn:aws:logs:us-east-1:123456789012:log-group:/log-group-1234:*
  </code></pre>
  
  <p>but i need:</p>
  
  <pre><code>arn:aws:logs:us-east-1:123456789012:log-group:/log-group-1234
  </code></pre>
  
  <p>So the last part (*) need be removed. </p>
  
  <p>How can I use the reference to archive it? I can split and select the last session, but how to remove it? (<strong>I hard code the log group name as sample only</strong>)</p>
  
  <blockquote>
    <p>{ "Fn::Select" : [ "8", { "Fn::Split": [":", {"Fn::ImportValue": "arn:aws:logs:us-east-1:123456789012:log-group:/log-group-1234:*"}]}] }</p>
  </blockquote>
  
  <h3>Update:</h3>
  
  <p>Thanks, @Miles. I made it work</p>
  
  <pre><code>    Fn::Select:
        - '0'
        - Fn::Split:
          - ":*"
          - Fn::GetAtt: [ LogsGroup, Arn ]
  </code></pre>