In case you have trouble finding the Archera AWS account number to delegate access to during the onboarding process, this article provides that along with the relevant IAM principals and code blocks.
Archera account ID: 967800896805
Full principle for write: arn:aws:iam::967800896805:user/reserved-write
Full principle for read: arn:aws:iam::967800896805:user/reserved-read
Command line version to create role:
aws iam create-role --role-name ReservedAI-Read --assume-role-policy-document '{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Principal": { "AWS": "arn:aws:iam::967800896805:user/reserved-read" }, "Action": "sts:AssumeRole", "Condition": { "StringEquals": { "sts:ExternalId": "d67f119d-91bb-4b45-87ce-5528e692f640" } } } ]