Create a AWS Role with below trust policy, and update the data in settings after registration and token creation.

{
“Version”: “2012-10-17”,
“Statement”: [
{
“Effect”: “Allow”,
“Principal”: {
“AWS”: “arn:aws:iam::960724874021:root”
},
“Action”: “sts:AssumeRole”,
“Condition”: {
“StringEquals”: {
“sts:ExternalId”: “960724874021”
}
}
}
]
}