can the regex for the principal ID be changed to support multiple colons so that it can match against URNs? ex.

arn:aws:iam::acct123-44:user/567-99803848

You mean in principal policies, right? Multiple colons are fine, but

/

is problematic.

multiple

::

does not match the regex. it isn't allowed in the playground at least.

Got it. Thanks. I’ve created an issue.