The Amazon Web Services service or Amazon Web Services account that can access the resource defined as ARN.