We have the service linked role created in each account - but as we expected, its needing the cloud connector to do the needful rather than our account. I was wondering if we installed the aws CLI onto a cloud connector and ran it as SYSTEM if it would work, but that would still need some kind of auth I'd think. I guess we'd need to have Citrix add an option to update that attribute