Snowflake执行COPY INTO时报AWS_ROLE假设错误求助排查

我们DevOps团队创建了新的S3桶，在Snowflake中执行以下创建Stage的命令可正常运行：

CREATE STAGE IF NOT EXISTS test.business_tools
URL = 's3://new_bucket/'
CREDENTIALS = (aws_role = 'arn:aws:iam::xxxxxxx:role/s3-snowflake-blah-dev')

但执行COPY INTO命令时，出现错误：

错误：无法承担AWS_ROLE，请确认您的AWS策略中角色和externalId配置正确。

DevOps团队表示信任关系配置无误，且已更新S3桶的IAM政策（政策内容如下），目前不清楚问题所在，请求协助排查：

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "s3:ListBucket",
                "s3:GetBucketLocation"
            ],
            "Resource": [
                "arn:aws:s3:::new_bucket"
            ]
        },
        {
            "Effect": "Allow",
            "Action": [
                "s3:PutObject",
                "s3:GetObject",
                "s3:GetObjectVersion",
                "s3:DeleteObject",
                "s3:DeleteObjectVersion"
            ],
            "Resource": "arn:aws:s3:::new_bucket/*"
        }
    ]
}

内容的提问来源于stack exchange，提问作者KristiLuna