AWS CLI Filters and Queries

allow bucket owner to read objects written by other accounts

s3client = session.client('s3')
s3client.put_object(Key=iam_username, 
                    Bucket=bucket_name, 
                    Body=f'file://{report_filename}', ACL='bucket-owner-full-control'
                    )