diff --git a/main.tf b/main.tf
index fc172210..1bcc085f 100644
--- a/main.tf
+++ b/main.tf
@@ -5,7 +5,7 @@ resource "aws_s3_bucket" "data" {
   # bucket does not have versioning
   bucket        = "${local.resource_prefix.value}-data"
   region        = "us-west-2"
-  acl           = "public-read"
+  acl           = "private"
   force_destroy = true
   tags = {
     Name        = "${local.resource_prefix.value}-data"