AWS STS ExternalId and the Confused Deputy Problem: A Practical Guide

Cross-account IAM roles are the standard mechanism for granting third-party services access to your AWS account. The problem is that naming an entire AWS account as the trusted principal is not specif