diff --git a/s3.tf b/s3.tf
index c7fcb3b..0a0dbb1 100644
--- a/s3.tf
+++ b/s3.tf
@@ -4,7 +4,6 @@ resource "aws_s3_bucket" "data" {
   # bucket does not have access logs
   # bucket does not have versioning
   bucket        = "${local.resource_prefix.value}-data"
-  acl           = "public-read"
   force_destroy = true
   tags = merge({
     Name        = "${local.resource_prefix.value}-data"