For custom storage aws s3 with the sts method, is there an option to add external_id for extra security later to prevent confused deputy attacks? Thank you.