diff --git a/packages/aws-cdk-lib/aws-kms/lib/via-service-principal.ts b/packages/aws-cdk-lib/aws-kms/lib/via-service-principal.ts
index 85305f2db7a7e..9b31f039fb5a0 100644
--- a/packages/aws-cdk-lib/aws-kms/lib/via-service-principal.ts
+++ b/packages/aws-cdk-lib/aws-kms/lib/via-service-principal.ts
@@ -9,6 +9,7 @@ export class ViaServicePrincipal extends iam.PrincipalBase {
   constructor(private readonly serviceName: string, basePrincipal?: iam.IPrincipal) {
     super();
     this.basePrincipal = basePrincipal ? basePrincipal : new iam.AnyPrincipal();
+    this.principalAccount = basePrincipal.principalAccount;
   }
 
   public addToPrincipalPolicy(_statement: iam.PolicyStatement): iam.AddToPrincipalPolicyResult {