Ravi Sir's Cards › AWS
Ownership and ACL condition
This revision card explains Ownership and ACL condition. It starts from the need that delivery often requires bucket-owner-full-control so the archive account owns objects. It describes condition StringEquals s3 — x-amz-acl bucket-owner-full-control on PutObject. The how-to section notes unrelated IAM user PutObject , then AccessDenied. An example on the card is ananya Iyer verifies ACL condition with a failing unsigned put.
Read card text
What this card says
Why do we need it?
Delivery often requires bucket-owner-full-control so the archive account owns objects.
x-amz-acl
What is it?
Condition StringEquals s3:x-amz-acl bucket-owner-full-control on PutObject.
How to do it
Unrelated IAM user PutObject → AccessDenied.
Example
Ananya Iyer verifies ACL condition with a failing unsigned put.