Object storage can use an ACL or bucket policy to manage permissions.

An ACL grants an account the permission to access resources.

Access control list (ACLs) can be used to grant and deny permissions.

A bucket policy is used to control the permission of a single user or multiple users to access a bucket or objects in the bucket.