Specifies the entitlement configuration, including the principal and the IAM role to grant access to.