The Genesys Cloud bulk export job fails immediately when attempting to write digital channel transcripts to our BYOC S3 bucket. The audit log shows a 403 Forbidden error with Access Denied despite the IAM role having s3:PutObject permissions and the correct KMS key policy. Why does this setting prevent the Data Action from assuming the cross-account role?