title: In S3 bucket, what is the difference between "public" and "Objects can be public"?
body: <p>We have several buckets, some as &quot;public&quot; and others as &quot;Objects can be public&quot;. And I don't understand what the difference is?</p>
  <p>I don't want any of the buckets to be publicly list-able. And on all buckets I want to be in control what people can access or see. Some keys public (you still need to know the URL to access it, no listing allowed) and some keys private, so you can't even tell it is there.</p>
  <p>What is the configuration I should use?</p>
  <p>I sometimes get warning notices from AWS, saying the buckets are public and I should check if I really want this. What is the risk? And can I just change the</p>
  <p>In both of the configuration under &quot;Permissions&quot; it says</p>
  <ul>
  <li>Block all public access -- Off
  <ul>
  <li>Block public access to buckets and objects granted through new access control lists (ACLs) -- Off</li>
  <li>Block public access to buckets and objects granted through any access control lists (ACLs) -- Off</li>
  <li>Block public access to buckets and objects granted through new public bucket or access point policies -- Off</li>
  <li>Block public and cross-account access to buckets and objects through any public bucket or access point policies -- Off</li>
  </ul>
  </li>
  </ul>
  <p>So I don't even see the difference?</p>