Connecting Control Center to Cloud cluster

Having issues trying to boostrap a C3 7.0.1 instance from a Confluent cloud cluster. Confluent is failing to start with the following error message:

Mar 14 18:30:37 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: SLF4J: Class path contains multiple SLF4J bindings.
Mar 14 18:30:37 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: SLF4J: Found binding in [jar:file:/usr/share/java/acl/acl-7.0.1.jar!/org/slf4j/impl/StaticLoggerBinder.class]
Mar 14 18:30:37 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: SLF4J: Found binding in [jar:file:/usr/share/java/confluent-control-center/slf4j-log4j12-1.7.30.jar!/org/slf4j/impl/StaticLoggerBinder.class]
Mar 14 18:30:37 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: SLF4J: See http://www.slf4j.org/codes.html#multiple_bindings for an explanation.
Mar 14 18:30:37 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: SLF4J: Actual binding is of type [org.slf4j.impl.Log4jLoggerFactory]
Mar 14 18:30:38 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: WARNING: An illegal reflective access operation has occurred
Mar 14 18:30:38 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: WARNING: Illegal reflective access by com.google.inject.internal.cglib.core.$ReflectUtils$1 (file:/usr/share/java/acl/acl-7.0.1.jar) to method java.lang.ClassL
Mar 14 18:30:38 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: WARNING: Please consider reporting this to the maintainers of com.google.inject.internal.cglib.core.$ReflectUtils$1
Mar 14 18:30:38 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations
Mar 14 18:30:38 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: WARNING: All illegal access operations will be denied in a future release
Mar 14 18:30:45 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: Exception in thread "main" com.google.inject.ProvisionException: Unable to provision, see the following errors:
Mar 14 18:30:45 ip-10-233-110-46.us-west-2.compute.internal control-center-start[7530]: 1) Error in custom provider, java.lang.RuntimeException: Failed to get bootstrap cluster id

Here’s what my control-center-production.properties files looks like

# Confluent Control Center specific configuration
confluent.controlcenter.streams.sasl.mechanism=PLAIN
confluent.controlcenter.streams.security.protocol=SASL_SSL
bootstrap.servers=<cluster>:9092
confluent.controlcenter.streams.sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginModule required username="secret" password="secret";
confluent.metrics.topic.max.message.bytes=8388608
confluent.controlcenter.mode.enable=management
confluent.controlcenter.data.dir=/data/kafka

# Confluent Schema Registry configuration for Confluent Control Center
confluent.controlcenter.schema.registry.basic.auth.credentials.source=USER_INFO
confluent.controlcenter.schema.registry.basic.auth.user.info=secret:secret
confluent.controlcenter.schema.registry.url=https://<schema_registry>.aws.confluent.cloud

The key I’m using to boostrap from is associated to a service account which has, for now, the OrganizationAdmin role bound to it and the key was created after that role was bound to the user

confluent iam rbac role-binding list --role OrganizationAdmin --principal "User:sa-q2vgn6"
    Principal    | Email |       Role        | Environment | Cloud Cluster | Cluster Type | Logical Cluster | Resource Type | Name | Pattern Type
-----------------+-------+-------------------+-------------+---------------+--------------+-----------------+---------------+------+---------------
  User:sa-q2vgn6 |       | OrganizationAdmin |             |               |              |                 |               |      |

I can also confirm that I have network connectivity to the cluster in question from the C3 instance:

# nc -vz <cluster> 9092
Ncat: Version 7.50 ( https://nmap.org/ncat )
Ncat: Connected to 10.233.102.211:9092.
Ncat: 0 bytes sent, 0 bytes received in 0.01 seconds.

Any ideas on why I am not able to retrieve the boostrap cluster id? Also, how do I get rid of those SLF4J bindings errors/warnings?

Thanks.