The Amazon Web Services service or entity that holds the permission. At this time, the only valid principal is acm.amazonaws.com.
acm.amazonaws.com