The 2 major confused conditions when writing a service control policy is whether to use aws:PrincipalAccount or aws:SourceAccount., Though they look similar, they are widely different from one another and using the wrong one can… AWS IAM aws:PrincipalAccount vs. aws:SourceAccount