In addition to the required bucket policies, Amazon S3 uses access control lists (ACLs)
to manage access to the log files created by a flow log. By default, the bucket
owner has FULL_CONTROL permissions on each log file. The log delivery
owner, if different from the bucket owner, has no permissions. The log delivery
account has READ and WRITE permissions. For more
information, see Access control list
(ACL) overview in the Amazon S3 User Guide.
