refactor(cdn): remove ACL parameter from S3 uploads, rely on bucket policy instead (#153)

Author: sgore-godaddy

CHANGELOG.md

@@ -2,6 +2,8 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+- Remove ACL parameter from S3 uploads, rely on bucket policy for public access.
+
 ## [7.4.2](https://github.com/godaddy/warehouse.ai/compare/7.4.0...7.4.2) (2025-10-29)
 
 ### Bug Fixes

lib/plugins/cdn.js

@@ -22,8 +22,6 @@ const finger = require('fingerprinting');
  * @property {WrhsAssetFile[]} files
  */
 
-const DEFAULT_ACL = 'public-read';
-
 module.exports = fp(
   /**
    * Initialize CDN plugin
@@ -139,7 +137,6 @@ module.exports = fp(
             ContentType: mime.lookup(filepath),
             Bucket: cdnS3Bucket,
             Key: filepath,
-            ACL: DEFAULT_ACL,
             Expires: expiration
           })
           .promise();