Principal to be granted the permissions on the resource. Supported principals are IAM users or IAM roles. One of the following is required: