The principal, which can be a certificate ARN (as returned from the CreateCertificate operation) or an Amazon Cognito ID.
The name of the thing.
The type of the relation you want to specify when you attach a principal to a thing.