{"Version":"2012-10-17","Statement":[{"Effect":"Allow","Principal":{"AWS":"arn:aws:iam::042984980165:root"},"Action":"sts:AssumeRole","Condition":{"StringEquals":{"sts:ExternalId":"REPLACE_WITH_YOUR_EXTERNAL_ID"}}}],"_instructions":"1. Create an IAM role in your AWS account. 2. Attach the FOA readonly policy (download from /api/v1/iam-policy/readonly). 3. Set this JSON as the role's trust policy. 4. Replace 042984980165 with the FinOpsAnalyzer platform AWS account ID. 5. Replace REPLACE_WITH_YOUR_EXTERNAL_ID with a unique string (or remove the Condition block). 6. Copy the role ARN into FinOpsAnalyzer when adding your account."}