The AWS principal receiving cross-account permissions. This may be an IAM role or another AWS account ID.