Cross-account aws_s3.table_import_from_s3

Hi,

I'm trying to use aws_s3.table_import_from_s3 to read data stored in a separate account, but the GetObject call is failing. If I reproduce the issue from the CLI, I get the following error:

The ciphertext refers to a customer ma$ter key that does not exist, does not exist in this region, or you are not allowed to access.

Reading between the lines, I'm guessing that the aws_s3 extension automatically uses the customer ma$ter key to encrypt files at rest, but this behaviour isn't described anywhere in the docs. I don't have encryption enabled by default on the bucket. IS this just a completely unsupported scenario?

Also, bizarrely, the content policy here doesn't let me use the word "ma5ter" because it's not "inclusive". Absurd.