In order to achieve this access - we need to generate a client_id and client_secret from "https://BBB.sharepoint.com" site and uses that code in "AAA" site while sending the data "BBB" site.
There is a long steps how to the generate the client_id and client_secret code.
Step 1: Register Add-In
Go to the this page of your BBB site https://.SharePoint.com/_layouts/15/appregnew.aspx
Here you will get: client id and client secret
Save this information in notepad.
Step 2: Grant Permissions to Add-In
Go to this page of your BBB site:
Enter the "Client ID" in the App ID field and click on Lookup button
Now enter the below permission request in XML format:
<AppPermissionRequest Scope="http://sharepoint/content/sitecollection/web" Right="Read" />
Step 3: Retrieve the Tenant ID
In POST man tool do a GET request for this URL(BBB site):
From the Header section you will get the realm value which is nothing but your client ID.
So finally while you are sending the client id and client secret to the AAA site(your source site from where you are uploading the document), it should be in the below format:
Now when the other system here it is application "AAA site" performing the POST call to the "SharePoint site here it is https://BBB.sharepoint.com", they need to use these two client_id and client_secret key.
Detailed explanation is here: