Invalid principal

The principal you've provided when creating a secret with AWS distribution is not valid.

Common causes for this are:

• the principal is not a valid ARN
• instead of providing AWS IAM Role, you're trying to set STS assume role session ARN.