Use when: on_fail with orb

I need to run steps ‘2 and 3’ if a step 1 fails. Step ‘2’ is a call to an orb:"

      - run:
          name: Deploy artifact
          command: make deploy_deploy deploy_env="<< parameters.deploy_env >>"
      # Needs to run on_fail
      - aws-cli/assume_role_with_web_identity:
          role_arn: "${SOME_VAR}"
          role_session_name: "${SOME_SESSION}-<< pipeline.number >>"
          when: on_fail
      # Needs to run after step 2 on_fail
      - run:
          name: "Report failure"
          command: make --directory="scripts" slack_helm_deploy_failed deploy_env="<< parameters.deploy_env >>"
          when: on_fail

What are my options?

Can I wrap multiple steps into a command and then mark the command with when: on_fail?