In case you have trouble finding the Archera AWS account number to delegate access to during the onboarding process, this article provides that along with the relevant IAM principals and code blocks.
You can find more details on the IAM Permissions this role requires here.
Archera's account ID: 967800896805
Full principle for production: arn:aws:iam::967800896805:user/reserved-write
Full principle for trial: arn:aws:iam::967800896805:user/reserved-read
Archera's GovCloud account ID: 202754554539
Full principle for GovCloud production: arn:aws:iam::202754554539:user/reserved-write
Full principle for GovCloud trial: arn:aws:iam::202754554539:user/reserved-read
Command line version to create trial role:
aws iam create-role --role-name ReservedAI-Read --assume-role-policy-document '{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::967800896805:user/reserved-read" }, "Action": "sts:AssumeRole", "Condition": { "StringEquals": { "sts:ExternalId": "d67f119d-91bb-4b45-87ce-5528e692f640" } } } ]