{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":30936,"path":"it-operations-management/itom-cloud-accelerate/cal-aws-s3-get-acl.md","title":"CAL - AWS S3 Get ACL subflow","bundle":null,"doc_type":null,"release":"australia","body":"\n# CAL - AWS S3 Get ACL subflow\n\nSubflow that retrieves the Access Control List \\(ACL\\) details for the specified Amazon Web Services \\(AWS\\) S3 bucket.\n\n## Roles and availability\n\n-   **Subscription requirements**\n\n    To use this subflow in custom flows, you must obtain an Integration Hub Enterprise subscription or an App Engine subscription. For more information, see [Request Integration Hub](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/integrate-applications/request-ih-overview.md).\n\n-   **Role requirements**\n\n    This subflow requires roles granted by delegated development or assigned to the user. For more information, see [User access to Flow Designer](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/build-workflows/user-access-flow-designer.md).\n\n\n## Cloud permission\n\nTo execute this subflow, the caller must have the **s3:GetBucketAcl** cloud permission.\n\n## Inputs\n\nProvide a value for each input that your action needs. To add dynamic values, you can also select data pills using the pill picker.\n\n-   **Bucket Name**\n\n    Data type: **String**\n\n    Name of the AWS S3 bucket.\n\n-   **Use MID**\n\n    Data type: **True/False**\n\n    Selection to indicate whether to use a MID Server to make the outbound calls.\n\n-   **MID Server**\n\n    Data type: **Record**\n\n    MID Server for making the outbound calls.\n\n-   **Credential Alias**\n\n    Data type: **Record**\n\n    Credential alias for the AWS credential.\n\n\n## Outputs\n\nYou can use these outputs as inputs for other actions.\n\n-   **Is Access Denied**\n\n    Data type: **True/False**\n\n    Server authorization status of the call.\n\n    -   **True**: The server has authorized the call\n    -   **False**: The server didn't authorize the call\n-   **Bucket Region**\n\n    Data type: **String**\n\n    Datacenter where the specified AWS S3 bucket is hosted.\n\n-   **Error Code**\n\n    Data type: **String**\n\n    Client error code returned for the failed call.\n\n-   **Owner write**\n\n    Data type: **True/False**\n\n    The bucket owner can write into the bucket.\n\n-   **Owner full control**\n\n    Data type: **True/False**\n\n    The owner has all the permissions for the bucket.\n\n-   **Owner listing**\n\n    Data type: **True/False**\n\n    The bucket owner can list the contents of the bucket.\n\n-   **Public write**\n\n    Data type: **True/False**\n\n    Anyone \\(public access\\) can write into the bucket.\n\n-   **Public listing**\n\n    Data type: **True/False**\n\n    Anyone \\(public access\\) can list the contents of the bucket.\n\n-   **Public full control**\n\n    Data type: **True/False**\n\n    Everyone \\(public access\\) has all the permissions.\n\n-   **Auth Users Write**\n\n    Data type: **True/False**\n\n    Authenticated user groups \\(users with an AWS account\\) can write into the bucket.\n\n-   **Auth Users Full Control**\n\n    Data type: **True/False**\n\n    Authenticated user groups \\(users with an AWS account\\) have all the permissions for the bucket.\n\n-   **Owner Read ACL**\n\n    Data type: **True/False**\n\n    Owner of the bucket can read the bucket ACL.\n\n-   **Owner Write ACL**\n\n    Data type: **True/False**\n\n    Owner of the bucket can write or update the bucket ACL.\n\n-   **Public Read ACL**\n\n    Data type: **True/False**\n\n    Anyone \\(public access\\) can read the bucket ACL.\n\n-   **Public Write ACL**\n\n    Data type: **True/False**\n\n    Anyone \\(public access\\) can write or update the bucket ACL.\n\n-   **Auth Users Read ACL**\n\n    Data type: **True/False**\n\n    Authenticated user groups \\(users with an AWS account\\) can read the bucket ACL.\n\n-   **Auth Users Write ACL**\n\n    Data type: **True/False**\n\n    Authenticated user groups \\(users with an AWS account\\) can write or update the bucket ACL.\n\n-   **Auth Users Listing**\n\n    Data type: **True/False**\n\n    Authenticated user group \\(users with an AWS account\\) can list the contents of the bucket.\n\n-   **Owner ID**\n\n    Data type: **String**\n\n    Canonical user ID of the AWS account.\n\n-   **Owner Display Name**\n\n    Data type: **String**\n\n    Display name of the resource owner.\n\n    For federated login, the subflow doesn't return any Owner Display Name.\n\n\n**Parent Topic:**[Cloud Action Library reference](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/itom-cloud-accelerate/cloud-action-library-reference.md)\n\n"}}