Pega Cloud's S3 repository configuration specifically requires AccessKeyID and Secret,  which are credentials associated with an IAM user. While IAM roles can also grant access to S3,  Pega Cloud's system appears to be designed to work with IAM user credentials specifically for this  configuration. 

The new client (Credit Card) is expecting a connection to established from PEGA Cloud Env (Dt1, Stg1, PROD) to their S3 which is in client owned AWS Cloud  Evironment.

Is there a solution/suggestion from PEGA Cloud team, that can be evaluated or considered?

Have seen similar posts and seems no conclusions or confirmed documentation.