Please check these articles to learn the basics of ACL editing. Here we will explain some additional features of the ACL editor. ACL Table - Rows
Each row represents Grantee. There are four types of Grantees: - Owner
- Authenticated Users
- All Users
- User by Email/ID
Owner - Every bucket/file in Amazon S3 has an owner, the user that created the bucket/file. The owner of a bucket/file cannot be changed. Authenticated Users - Anyone with an Amazon AWS account. Although this is inherently insecure as any AWS user who is aware of the bucket/file will be able to access it, you might find this authentication method useful.
All Users - Anonymous access to any Amazon S3 bucket or file. Any user will be able to access the files.
User by Email/ID - User with Amazon Web Services account. You use Email or ID to specify the user. Any users that you grant access will be able to access buckets and files using their AWS Access Key IDs and Secret Access Keys.
ACL Table - Columns
Each column represents a permission. The permission in a grant describes the type of access to be granted to the respective grantee. There are five types of permissions: - Full Control
- Read
- Write
- Read ACL
- Write ACL
Full Control - Provides Read, Write, Read ACL and Write ACL permissions. It does not provide any additional rights and is included only for convenience. Read - When applied to the bucket, grants permissions to list the bucket. When applies to the file, this grants permissions to read the file data and/or metadata.
Write - When applied to the bucket, grants permission to create, overwrite, and delete any file in the bucket. This permission is not supported for files.
Read ACL - Allows a user to read the ACL for the specified bucket or file.
Write ACL - Allows a user to overwrite the ACL for the specified bucket or file. The owner of a bucket or file always has this permission implicitly. Granting this permission is equivalent to granting Full Control because the grant recipient can make any changes to the ACL.
Make Public button allows you to grant Read permission to All Users making the file available for everyone.
Make Private button allows you to reset permissions and make selected file(s) private.
More -> Add user by Email/ID button allows you to add user by Email/ID .
More -> Remove user will delete selected user from the grantees list.
Apply to child objects - enable this checkbox if you want to apply permissions to child objects (subdirectories/files).
Apply/Revert buttons allows you to apply or revert changes.