Principal to be granted the permissions on the resource. Supported principals are IAM users or IAM roles.