Update AWS Role External ID (optional)

If you have previously created an AWS role, you will only need to update the old External ID to the new FortiCASB generated 32-bit External ID token without creating a new AWS role.

Follow the steps below to update the External ID:

1. Log into your AWS account portal using your Administrator User.
2. Search and click on IAM (Manage Access to AWS resources) from the AWS portal page.
3. Click on Roles, search and click on the AWS Role you created for adding the AWS S3 account to FortiCASB.
4. Click Trust Relationships tab and click on Edit trust relationship.



5. Replace the External ID value in the line "sts:ExternalId" with the FortiCASB generated 32-bit External ID.



6. Click Update Trust Policy to finish updating the External ID.