From 0779166fe9eeae4e33ace2feeead95c03c0031cd Mon Sep 17 00:00:00 2001
From: Matt Jarvis <matt.jarvis2@nhs.net>
Date: Thu, 12 Feb 2026 10:20:33 +0000
Subject: [PATCH] VED-1029: Set ACL when copying extended attributes files.

---
 lambdas/shared/src/common/aws_s3_utils.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lambdas/shared/src/common/aws_s3_utils.py b/lambdas/shared/src/common/aws_s3_utils.py
index 22291daa3..fefd90a50 100644
--- a/lambdas/shared/src/common/aws_s3_utils.py
+++ b/lambdas/shared/src/common/aws_s3_utils.py
@@ -30,6 +30,7 @@ def copy_file_to_external_bucket(
         Key=destination_key,
         ExpectedBucketOwner=expected_bucket_owner,
         ExpectedSourceBucketOwner=expected_source_bucket_owner,
+        ACL="bucket-owner-full-control",
     )