Skip to content

Glossary: Vulnerability, Asset and Change Management

ACL (access control list)

Also written: ACL, access control list, ACLs

A list of grants saying who may do what with a resource. On a storage bucket, a grant such as "AllUsers may READ" makes the bucket public, which is how kc-product-images became readable by anyone.

Where the book teaches it

Related terms

BucketBucket policyObject storageMisconfiguration