A user has granted read/write permission of his S3 bucket using ACL. Which of the below
mentioned options is a valid ID to grant permission to other AWS accounts (grantee. using ACL?

A.
IAM User ID

B.
S3 Secure ID

C.
Access ID

D.
Canonical user ID

Explanation:
An S3 bucket ACL grantee can be an AWS account or one of the predefined Amazon S3 groups.
The user can grant permission to an AWS account by the email address of that account or by the
canonical user ID. If the user provides an email in the grant request, Amazon S3 finds the
canonical user ID for that account and adds it to the ACL. The resulting ACL will always contain
the canonical user ID for the AWS account, and not the AWS account’s email address.