The principal who is getting this permission e.g., s3.amazonaws.com, an AWS account ID, or AWS IAM principal, or AWS service principal such as events.amazonaws.com or sns.amazonaws.com.
s3.amazonaws.com
events.amazonaws.com
sns.amazonaws.com