Aws Setup
account
Aws Setup
Per-org IAM trust info the console renders for the connector
setup snippet: OuterProduct’s shared principal ARN + the org’s
stable external_id.
The customer authors an IAM role in their account whose trust
policy lists principal_arn as the trusted AWS principal under
a sts:ExternalId == external_id condition. The /v1/connector
POST then assumes that role with the org’s external_id, so a
cross-tenant role (one written against another org’s external_id)
will fail at the STS layer.
GET
Aws Setup