“Trust relationship to assume role was not setup correctly for role arn:aws:iam:xxxxx:role/publiccloudwatchdashboardrole with externalId : xxxxxx”. I just used your example policy. What is happening here?