A vendor assumes customer roles using its own AWS account. Customers need protection against another vendor customer causing access to their roles. Which trust design addresses this?

1. Trust the intended vendor principal and require a vendor-assigned unique external ID.
2. Trust every principal if the vendor knows the customer account ID.
3. Rely only on the role description naming the vendor.
4. Put the customer root password in the role session name.