Question from a hosting service provider regarding HAD:

"Can we deploy a agent or not in a single AWS account and then in the service template specify a role ARN. At the moment we have several hundred accounts, each of these accounts would have an IAM role in them eg HAD-Automation. The ideal objective here would be say use the agent on x server and then assume the HAD-Role in this AWS account. Thus not needed IAM keys as its all assumed role. A key take away here would also be able to specify and external ID when assuming the roles."

Any comment? Thanks.