Email address of the grantee. Used only when type is AmazonCustomerByEmail.
type
AmazonCustomerByEmail
Canonical user ID of the grantee. Used only when type is CanonicalUser.
CanonicalUser
List of permissions to grant to grantee. Valid values are READ, READ_ACP, WRITE_ACP, FULL_CONTROL.
READ
READ_ACP
WRITE_ACP
FULL_CONTROL
Type of grantee. Valid values are CanonicalUser, Group, and AmazonCustomerByEmail. This configuration block has the following optional arguments (one of the three is required):
Group
URI of the grantee group. Used only when type is Group.