Managing ACLs in the AWS Management Console

AWS Management Console provides a UI for you to grant ACL-based access permissions to your buckets and objects. The Properties pane includes the following Permissions tab.

The tab shows the ACL for your selected resource. That is, it shows the list of grants found in the resource ACL. For each grant, it shows the grantee and a set of check boxes showing the permissions granted. The permission names in the console are different than the ACL permission names (see What Permissions Can I Grant?). The preceding illustration shows the mapping between the two.

The preceding illustration shows a grantee with FULL_CONTROL permissions; note that all the check boxes are selected. All the UI components shown, except the Add bucket policy link, relate to the ACL-based permissions. The UI allows you to add or remove permissions. To add permissions, click Add more permissions, and to delete a permission, highlight the line and click X to the right of it. When you are done updating permissions, click Save to update the ACL. The console sends the necessary request to Amazon S3 to update the ACL on the specific resource.