Grant federated users access to an S3 bucket in another AWS account using IAM Identity Center permission sets.