In this case the EventBridge team actually added some nice features. By specifying a Resource Policy on the EventBus (e.g. that allows all accounts in the same organization to add rules) you can use the ARN of the EventBus to directly deploy cross-account rules from a single CloudFormation stack