diff --git a/modules/cookbooks/examples/dynamodb_cdc/to-s3.yaml b/modules/cookbooks/examples/dynamodb_cdc/to-s3.yaml
index d13686f4..5e0c9c4c 100644
--- a/modules/cookbooks/examples/dynamodb_cdc/to-s3.yaml
+++ b/modules/cookbooks/examples/dynamodb_cdc/to-s3.yaml
@@ -30,6 +30,7 @@ output:
     bucket: ${S3_BUCKET}
     path: dynamodb-cdc/${DYNAMODB_TABLE}/${! @s3_path }/${! uuid_v4() }.json
     region: ${AWS_REGION}
+    object_canned_acl: private
     batching:
       count: 1000
       period: 1m