Authenticated Read

. Gives the bucket or object owner FULL_CONTROL permission and gives all authenticated Google account holders READ permission.

Bucket Owner Full Control

. Grants full control permission to the bucket or object owner and grants read permission to all the authenticated Google account holders.

Bucket Owner Read Only

. Grants full control permission to the object owner and grants read permission to the bucket owner. Use this type only with objects.

Private

. Gives the bucket or object owner FULL_CONTROL permission for a bucket or object.

Project Private

. Gives permission to the project team based on their roles. Anyone who is part of the team has READ permission and project owners and project editors have FULL_CONTROL permission. This is the default ACL for newly created buckets.

Public Read Only

. Gives the bucket owner FULL_CONTROL permission and gives all anonymous users READ and WRITE permission. This ACL applies only to buckets. When you apply this to a bucket, anyone on the Internet can list, create, overwrite,

and delete objects without authenticating.