-record(access_control_policy, {
    grants :: gleam@option:option(list(aws@services@s3:grant())),
    owner :: gleam@option:option(aws@services@s3:owner())
}).