The IAM action to grant or revoke permissions on.
The Amazon Resource Name (ARN) of the principal. This can be one of the following: