Summary

For all AWS calls that use sts's assume_role we need to supply the external id when available along with the role ARN to make sure we are allowed access to the account.

Details

See https://github.com/project-koku/koku/blob/main/koku/masu/util/aws/common.py#L162 for the get_assume_role_session function definition.

• Any other function that calls this would need to also provide the external ID.