owner-id owner-display-name user-id user-display-name READ foo@example.com WRITE http://acs.amazonaws.com/groups/global/AuthenticatedUsers FULL_CONTROL