Ravi Sir's Cards › AWS
Policy or ACL?
This comparison card contrasts Policy or ACL. Bucket policy public read: Central JSON. It also notes easier audit. It works with BPA plan. Object ACL public-read: Per-object ACL. It also notes easy to drift and over-share. The card pairs Bucket policy public read with prefer for websites, and Object ACL public-read with avoid for new work.
Read card text
What this card says
Policy or ACL?
Bucket policy public read
Central JSON; easier audit; works with BPA plan.
Object ACL public-read
Per-object ACL; easy to drift and over-share.
Key points
Site-wide public GetObject.
One mistaken public-read object.
Example
put-bucket-policy / put-object-acl
Use when
Prefer for websites.
Avoid for new work.