principalArn

The Amazon Resource Name (ARN) of the IAM user or role for the AccessEntry that you're associating the access policy to.