Generally, S3 permissions from other services are managed via a Bucket Policy for example: allowing Cloudtrail to send logs to S3.
However, for CRR (Cross-Region replicat