Setting a Principal in an access policy will effectively grant users, accounts, or services with access to a specific resource. Using wildcards for a policy Principal may lead to unauthorized access and is not considered best practice. While there may be other mitigating circumstances, it is best to ensure that the Principal is configured for a specific user or group.
In AWS Console -
In Terraform -