Using an External ID with STS AssumeRole