anchor.diff:          "Effect": "Allow",
           "Principal": {
             "AWS": [
  -            "arn:aws:iam::123456789012:root"
  +            "arn:aws:iam::<account-id>:root"
             ]
           },
           "Action": "kms:*",
  
positive.code:         "Effect": "Allow",
          "Principal": {
            "AWS": [
              "arn:aws:iam::123456789012:role/nodes.example.cluster.k8s.local"
            ]
          },
          "Action": [
  
negative.code:         "Effect": "Allow",
          "Principal": {
            "AWS": [
              "arn:aws:iam::<account-id>:role/nodes.example.cluster.k8s.local"
            ]
          },
          "Action": [
  