I feel like this question has been asked previously, but I have not been able to find it. Is there a way within a single Pulumi program to grab resource references in a seperate AWS account? For example centrally managed DNS one one account, therefore when you create an ACM certificate in Account B, the DNS A Record for Validation would be pushed to Account A in the central account.

You can create two providers

yes, you can create another provider, and pass it.

const awsSecondProvider = new aws.Provider("account-b", { profile: "account-b", region: "us-east-1" });

const coolSecret: pulumi.Output<string> = pulumi.output(aws.secretsmanager.getSecretVersion({ secretId: "shared-mariadb-database-master-lmy-secret-1234" }, { provider: awsSecondProvider, async: true })).secretString;