Hi, I have aws sns topic access policy as picture, it was edited by manual, when i try to translate to pulumi IaC code, it not accepted 1. Statement IDs (SID) must be alpha-numeric.

Check that your input satisfies the regular expression [0-9A-Za-z]*

2. I change the Sid to AllowPublishAlarms

error creating IAM Policy sns-access-policy: MalformedPolicyDocument: Policy document should not specify a principal

const snsAccessPolicy = new aws.iam.Policy("sns-access-policy", {
  name: "sns-access-policy",
  policy: {
    Version: "2012-10-17",
    Statement: [
      {
        Sid: "Allow_Publish_Alarms",
        Effect: "Allow",
        Principal: {
          Service: "<http://aps.amazonaws.com|aps.amazonaws.com>",
        },
        Action: ["sns:Publish", "sns:GetTopicAttributes"],
        Resource: "arn:aws:sns:ap-southeast-1:482414749843:amp-sns-topic",
        Condition: {
          StringEquals: {
            "AWS:SourceAccount": "482414749843",
          },
          ArnEquals: {
            "aws:SourceArn":
              "arn:aws:aps:ap-southeast-1:482414749843:workspace/ws-be6e741f-d8ac-4330-b0fb-6a0c0aa92d6f",
          },
        },
      },
    ],
  },
});