A user has granted read/write permission of his S3 bucket using ACL. Which of the below mentioned options is
a valid ID to grant permission to other AWS accounts (grantee. using ACL?

A.
IAM User ID

B.
S3 Secure ID

C.
Access ID

D.
Canonical user ID

Explanation:
An S3 bucket ACL grantee can be an AWS account or one of the predefined Amazon S3 groups. The user can
grant permission to an AWS account by the email address of that account or by the canonical user ID. If the
user provides an email in the grant request, Amazon S3 finds the canonical user ID for that account and adds it
to the ACL. The resulting ACL will always contain the canonical user ID for the AWS account, and not the AWS
account’s email address.