External account creation fails with "Invalid ARN or External ID. Could not assume STS role" error

Our Knowledge Base has been migrated to Palo Alto Live Community.

Link to new page: https://live.paloaltonetworks.com/t5/Cloud-Security-Evident-Articles/External-account-creation-fails-with-quot-Invalid-ARN-or/ta-p/213464