How to Use an External ID When Granting Access to Your AWS Resources to a Third Party