Updated on July 6, 2023: This post has been updated to reflect the current guidance around the usage of s3 ACL and to include s3 Access Points and the Block Public Access for accounts and s3 buckets.

Source: AWS Security Blog