I've got an AWS S3 bucket where the only permissions I've defined are for myself and Amazon's Log Delivery. As shown from the AWS Console:
As shown from another tool (S3 Browser):
There's no public or everyone or anonymous users in the ACL.
Yet, public/anonymous users can read objects from the bucket:
How can this be?