S3 Bucket ACLs Enabled or Disabled (recommended)?

From the README file:

  * If your S3 bucket is configured with BlockPublicAcls then enable the
    'upload_as_private' setting.

    Example:
      $settings['s3fs.upload_as_private'] = TRUE;

    * If s3fs will provide storage for s3:// or public:// files the generated
      links will return 403 errors unless access is granted either with
      presigned urls or through other external means.

From an S3fs standpoint either is acceptable and is not really an s3fs question but a question of what your policies are around data security for the appropriate choice.

The key information is when you choose "$settings['s3fs.upload_as_private'] = TRUE; (which is correct for Bucket ACL's disabled) is that it becomes the responsibility of the bucket owner (yourself) to either create a bucket policy that grants access to the appropriate S3 paths to make them public at the bucket level, to use pre-signing inside the s3fs module (though their are Drupal Cache issues to be aware of with this), or use other external means that allows access to the objects.

Considering this issue resolved as no additional questions were raised after providing feedback.

Automatically closed - issue fixed for 2 weeks with no activity.