Question - Why not use cross account IAM roles instead of asking for API keys?
http://docs.aws.amazon.com/IAM/latest/UserGuide/cross-acct-a...