By now I'm pretty sure that all my statements above are incorrect :

the Resource field in an Access Point Policy must reference an ARN for the objects it controls. Not the object we want to send data to or receive data from. I think that the policy references itself. What a silly question...