Defaults to principal ARN if user is principal else defaults to assume-role/session-name is role is used.