Example of Role with sts:ExternalId

gistfile1.txt

      "SumoLogicRole": {
        "Type": "AWS::IAM::Role",
        "Properties": {
          "Path": "/",
          "AssumeRolePolicyDocument": {
            "Statement": [
              {
                "Action": [
                  "sts:AssumeRole"
                ],
                "Effect": "Allow",
                "Principal": {
                  "AWS": [
                    {
                      "Fn::Sub": "arn:aws:iam::${SumologicAccountNumber}:root"
                    }
                  ]
                },
                "Condition": {
                  "StringEquals": {
                    "sts:ExternalId": {
                      "Ref": "SumologicExternalId"
                    }
                  }
                }
              }
            ]
          }
        }
      }