thanks for the response @Prabakar Ammeappin​ . We have manually created the S3 bucket and are waiting for someone at our client site that has IAM priviledges (we are contractors to them and don't have that permission) to create the cross-account role. My hope is to report back here in a few hours with the solution 🙂