Relationship Between a Bucket ACL and a Bucket Policy

Mapping Relationship Between Bucket ACLs and Bucket Policies

Bucket ACLs are used to control basic read and write access permissions for buckets. Custom settings of bucket policies support more actions that can be performed on buckets. Bucket policies, supplements to bucket ACLs, can replace the bucket ACL to manage the access permissions of a bucket. Table 1 shows the mapping between bucket ACL access permissions and bucket policy actions.

**Table 1** Mapping relationship between bucket ACLs and bucket policies
ACL Permission	Option	Mapped Action in a Custom Bucket Policy
Access to bucket	Read	ListBucket ListBucketVersions ListBucketMultipartUploads
Access to bucket	Write	PutObject DeleteObject DeleteObjectVersion
Access to ACL	Read	GetBucketAcl
Access to ACL	Write	PutBucketAcl

Mapping Relationship Between Object ACLs and Bucket Policies

Object ACLs are used to control basic read and write access permissions for objects. The custom settings of bucket policies support more actions that can be performed on objects. Table 2 describes the mapping relationship between object ACL access permissions and bucket policy actions.