feat: add external_id for assume role

Author: jihyungSong

src/spaceone/monitoring/connector/aws_boto_connector/__init__.py

@@ -23,9 +23,11 @@ def create_session(self, schema, options: dict, secret_data: dict):
         aws_secret_access_key = secret_data['aws_secret_access_key']
         region_name = secret_data.get('region_name')
         role_arn = secret_data.get('role_arn')
+        external_id = secret_data.get('external_id')
 
         if schema:
-            getattr(self, f'_create_session_{schema}')(aws_access_key_id, aws_secret_access_key, region_name, role_arn)
+            getattr(self, f'_create_session_{schema}')\
+                (aws_access_key_id, aws_secret_access_key, region_name, role_arn, external_id)
 
     @staticmethod
     def _check_secret_data(secret_data):
@@ -35,19 +37,28 @@ def _check_secret_data(secret_data):
         if 'aws_secret_access_key' not in secret_data:
             raise ERROR_REQUIRED_PARAMETER(key='secret.aws_secret_access_key')
 
-    def _create_session_aws_access_key(self, aws_access_key_id, aws_secret_access_key, region_name, role_arn):
+    def _create_session_aws_access_key(self, aws_access_key_id, aws_secret_access_key, region_name, role_arn, external_id):
         self.session = boto3.Session(aws_access_key_id=aws_access_key_id,
                                      aws_secret_access_key=aws_secret_access_key,
                                      region_name=region_name)
 
         sts = self.session.client('sts')
         sts.get_caller_identity()
 
-    def _create_session_aws_assume_role(self, aws_access_key_id, aws_secret_access_key, region_name, role_arn):
-        self._create_session_aws_access_key(aws_access_key_id, aws_secret_access_key, region_name, role_arn)
+    def _create_session_aws_assume_role(self, aws_access_key_id, aws_secret_access_key, region_name, role_arn, external_id):
+        self._create_session_aws_access_key(aws_access_key_id, aws_secret_access_key, region_name, role_arn, external_id)
 
         sts = self.session.client('sts')
-        assume_role_object = sts.assume_role(RoleArn=role_arn, RoleSessionName=utils.generate_id('AssumeRoleSession'))
+
+        _assume_role_request = {
+            'RoleArn': role_arn,
+            'RoleSessionName': utils.generate_id('AssumeRoleSession'),
+        }
+
+        if external_id:
+            _assume_role_request.update({'ExternalId': external_id})
+
+        assume_role_object = sts.assume_role(**_assume_role_request)
         credentials = assume_role_object['Credentials']
 
         self.session = boto3.Session(aws_access_key_id=credentials['AccessKeyId'],