-record(target_grant, {
    grantee :: gleam@option:option(aws@services@s3:grantee()),
    permission :: gleam@option:option(aws@services@s3:bucket_logs_permission())
}).