Status: IN
ACLs are the only IAM policy type that does not use JSON format and only work for cross-account access (cannot grant to entities in the same account).
Source: entries/2026/03/08/iam-policies.md
JSON