Why do I get the error "The request contained an unsupported argument" when I add an account to my Amazon S3 bucket's ACL?

Resolution

Some AWS Regions don't support the use of an email address to add an AWS account to an Amazon S3 bucket's ACL. However, the canonical ID always works for accounts in any AWS Region.

If you can't add the account because the Region doesn't support the use of the email address, use the account's canonical user ID instead. For instructions on how to retrieve the canonical user ID, see Find the canonical user ID for your AWS account.

If your bucket is in a newer AWS Region, then enter the canonical user ID to be sure that it maps to the associated account. For more information about AWS Regions, see AWS Global Infrastructure.

Note: It's a best practice to deactivate your bucket's ACLs and use S3 Object Ownership instead to take ownership of objects in your bucket.

Related information

Configuring ACLs