A condition that matches requests based on the caller's identity.
A list of principal entries. The condition is met if any of the entries match the caller's identity.