‘Update Role and External ID’ button function when editing an AWS account

Products

• CloudHealth

Issue/Introduction

The ‘Update Role and External ID’ button will remove the Role ARN currently configured and allow you to enter a different one.

Resolution

Any customers configured via Partner Generated Billing (PGB) will have the External ID of the Partner Tenant passed down to the Customer Tenant on the initial creation of that tenant.  Any Role ARN configured on the assigned AWS accounts at the partner tenant will be passed down as well.

When passing AWS accounts down to the Customer Tenant via PGB, the option to utilize the "Update Role and External ID" button will be available if edits to the AWS account take place within the Customer Tenant.

Be advised that using the button will reset the External ID to that of the Customer Tenant. However, there is a ‘sync’ button that will re-sync to the partner External ID if required.

Ideally, this should only be used if there are issues with the External ID and/or Role ARN - or if the Role ARN has been changed.

 

More info on Configuring AWS Payer Account