public String getPrincipalArn() {
        return this.principalArn;
    }
<p>
The ARN of the IAM principal for the <code>AccessEntry</code>. You can specify one ARN for each access entry. You
can't specify the same ARN in more than one access entry. This value can't be changed after access entry
creation.
</p>
<p>
The valid principals differ depending on the type of the access entry in the <code>type</code> field. The only
valid ARN is IAM roles for the types of access entries for nodes:
<code/> <code/>. You can use every IAM principal type for <code>STANDARD</code> access entries. You can't use the
STS session principal type with access entries because this is a temporary principal for each session and not a
permanent identity that can be assigned permissions.
</p>
<p>
<a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#bp-users-federation-idp">IAM best
practices</a> recommend using IAM roles with temporary credentials, rather than IAM users with long-term
credentials.
</p>

@return The ARN of the IAM principal for the <code>AccessEntry</code>. You can specify one ARN for each access
        entry. You can't specify the same ARN in more than one access entry. This value can't be changed after
        access entry creation.</p>
        <p>
        The valid principals differ depending on the type of the access entry in the <code>type</code> field. The
        only valid ARN is IAM roles for the types of access entries for nodes:
        <code/> <code/>. You can use every IAM principal type for <code>STANDARD</code> access entries. You can't
        use the STS session principal type with access entries because this is a temporary principal for each
        session and not a permanent identity that can be assigned permissions.
        </p>
        <p>
        <a
        href="https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#bp-users-federation-idp">IAM
        best practices</a> recommend using IAM roles with temporary credentials, rather than IAM users with
        long-term credentials.
aws-java-sdk-eks/src/main/java/com/amazonaws/services/eks/model/CreateAccessEntryRequest.java