const user = new aws.iam.User('backup-user');
const accessKey = new aws.iam.AccessKey(
  'backup-user-access-key',
  {
    user: user.name,
  },
  {
    parent: user,
  },
);
const bucket = new aws.s3.Bucket(
  'backup-bucket',
  {
    grants: [
      {
        id: user.id, // also tried user.uniqueId
        type: 'CanonicalUser',
        permissions: ['FULL_CONTROL'],
      },
      {
        type: 'Group',
        permissions: ['READ', 'WRITE'],
        uri: '<http://acs.amazonaws.com/groups/s3/LogDelivery>',
      },
    ],
  },
  {
    parent: user,
  },
);