S3 AWS CDK 的 access_control 和 public_read_access 有什么区别？

Question

我是 CDK 的超级新手，我想知道以下选项之间有什么区别：

access_control=s3.BucketAccessControl("PUBLIC_READ")

VS

public_read_access=True

同时使用这两个选项是多余的吗？

site_bucket = s3.Bucket(
        self, 
        "site-bucket",
        access_control=s3.BucketAccessControl("PUBLIC_READ"),
        public_read_access=True,
        website_index_document="index.html",
        versioned=True,
        removal_policy=core.RemovalPolicy.DESTROY,
        auto_delete_objects=True
    )

Answer 1

access_control 将canned ACL 应用于存储桶。

public_read_access=True 与调用site_bucket.grant_public_access() 相同。将存储桶策略更新为allow any principal to read objects in the bucket。