Learn how to create an IAM role and add an external ID to the role.

1. Log in to the AWS Management Console.
2. In the Create role page, create an IAM Role with that policy by choosing Another AWS account.
   1. In the Account ID field, enter your own AWS account ID. Once you modify the trusted relationship and grant access to Snowflake, replace this value with the Snowflake account ID.
   2. Select the Require external ID checkbox and enter the external ID in the External ID field. An external ID is required to grant access from your S3 storage to Snowflake. Reltio recommends that you enter your Reltio tenant ID in the External ID field. This allows you to track your storage location. If you don’t know your Reltio tenant ID, use a dummy ID such as 0000 and replace the dummy ID with your Reltio tenant after you modify the trusted relationship.
3. Click Create role.
4. In the Summary page, make a note of the value in the Role ARN field. You’ll need it when you Integrate snowflake with AWS.
   Important: Reltio does not support IAM Role ARNs that include a path component (for example, service-role/ in role/service-role/ROLE_NAME).

   Use this format instead: arn:aws:iam::AWS_ACCOUNT_ID:role/ROLE_NAME

   If your Role ARN includes a path, Reltio will be unable to validate or assume the role, and connection to the external queue will fail.