1.1 Access Control List—ACL

Access control lists (ACLs) are one of the resource-based access policy options (see Overview of Managing Access) that you can use to manage access to your buckets and objects. You can use ACLs to grant basic read/write permissions to other AWS accounts.

There are limits to managing permissions using ACLs.

• you can grant permissions only to other AWS accounts; you cannot grant permissions to users in your account.
• you cannot grant conditional permissions.
• you cannot explicilty deny permissions

Managing Access with ACLs in S3