Solving circular dependencies when attempting to add to a resource policy

Question

I\'m working with CDK, but I assume the same issues will happen (and hopefully can be solved) with pure CloudFormation

I\'m creating an S3 bucket with a KMS key some like