Learn how to create an Identity and Access Management (IAM) role and add an external ID to the role for the Data Pipeline Hub service user.

1. Log in to the AWS Management Console.
2. In the Create role page, select Another AWS account.
   1. In the Account ID field, enter your own AWS account ID. Once you modify the trusted relationship and grant access to Reltio, replace this value with the Reltio account ID.
   2. Select the Require external ID checkbox and enter the external ID in the External ID field. An external ID is required to grant access from your S3 storage to Reltio. For example, enter your Reltio tenant ID in the External ID field as this allows you to track your storage location. If you don’t know your Reltio tenant ID, use a dummy ID such as 0000 and replace the dummy ID with your Reltio tenant after you modify the trusted relationship.
3. Select Next.
4. Select the policy created in Create DPH service user IAM policy in AWS.
5. Select Next.
6. Enter a role name prefixed with "dph-service-role". For example: "dph-service-role-reltio".
7. Select Next.
8. Click Create role.
9. In the Summary page, make a note of the value in the Role ARN field.