GCP principals

The principal is the identity that gets the permissions specified in the policy statement.

In GCP includes users, groups, and service accounts.

Related

• Read https://docs.aws.amazon.com/kms/latest/developerguide/key-policies.html
• Error: MalformedPolicyDocumentException: Policy contains a statement with one or more invalid principals.
• AWS EC2 Instance Connect

See also

• KMS, Customer Master Key (CMK), GCP KMS, AWS Key Management Service (KMS) (aws kms), Google Cloud KMS (gcloud kms), Azure Key Vault, KMS v2 API, Kubernetes Key Management Service

https://cloud.google.com/iam/docs/understanding-roles