Appendix: Editing Trust Relationship After Regenerating External ID

Perform the following steps to edit the trust relationship after regenerating the external ID:

  1. Run the ‘Update an Integration’ API with the ‘regenerateExternalId’ field set to true. Note down the externalId received in the API Response.
  2. Go to AWS IAM Console > Roles.
  3. Open the role for which the externalId is changed.
  4. Under Trust Relationships, click Edit trust policy, update the ‘sts: ExternalId’ field, and click Update policy.
  5. Run the Validate Integration API to validate the integration.

 

Related Topic

Validate Integration