Principal is who can access the resources, It can be root User, or IAM user Example : User tied to group and given a access policy is a principal. Or Instance (eg. a VM instance).