gistfile1.txt

{
  "detail-type": [
    "AWS API Call via CloudTrail"
  ],
  "detail": {
    "eventSource": [
      "s3.amazonaws.com"
    ],
    "eventName": [
      "PutBucketAcl"
    ],
	"requestParameters": {
        "bucketName": "*",
        "AccessControlPolicy": {
            "AccessControlList": {
                "Grant": [
                    {
                        "Grantee": {
                            "xsi:type": "CanonicalUser",
                            "xmlns:xsi": "http://www.w3.org/2001/XMLSchema-instance",
                            "ID": "25791cc997315bfacbf7115d1f6e79ddfa810048305ea3956ec38a2b23f9a966"
                        },
                        "Permission": "READ"
                    }]
  }
}
}
}
}