diff --git a/README.md b/README.md
index 2ae3227..73757ed 100644
--- a/README.md
+++ b/README.md
@@ -103,7 +103,7 @@ module "my_bucket" {
 
 | Name | Description | Type | Default | Required |
 |------|-------------|------|---------|:--------:|
-| <a name="input_acl"></a> [acl](#input\_acl) | The acl config for bucket, NOTE: 'acl' conflicts with 'grant' and 'owner'. | `string` | `null` | no |
+| <a name="input_acl"></a> [acl](#input\_acl) | The acl config for bucket, NOTE: 'acl' conflicts with 'grant' and 'owner'. | `string` | `"private"` | no |
 | <a name="input_block_public_acls"></a> [block\_public\_acls](#input\_block\_public\_acls) | Whether Amazon S3 should block public ACLs for this bucket. | `bool` | `false` | no |
 | <a name="input_block_public_policy"></a> [block\_public\_policy](#input\_block\_public\_policy) | Whether Amazon S3 should block public bucket policies for this bucket. | `bool` | `false` | no |
 | <a name="input_bucket_files"></a> [bucket\_files](#input\_bucket\_files) | Initial content for bucket, use acl and pattern params if you need more control. | <pre>object({<br>    path = string<br>  })</pre> | <pre>{<br>  "path": ""<br>}</pre> | no |
diff --git a/tests/private/1-example.tf b/tests/private/1-example.tf
index c1d6a31..6aefdde 100644
--- a/tests/private/1-example.tf
+++ b/tests/private/1-example.tf
@@ -3,3 +3,10 @@ module "private" {
 
   name = "dasmeta-dev-private"
 }
+
+module "private-explicitly" {
+  source = "../.."
+
+  name = "dasmeta-dev-private-explicitly"
+  acl  = "private"
+}
diff --git a/tests/private/README.md b/tests/private/README.md
index 67e8fd8..e737c28 100644
--- a/tests/private/README.md
+++ b/tests/private/README.md
@@ -14,6 +14,7 @@ No providers.
 | Name | Source | Version |
 |------|--------|---------|
 | <a name="module_private"></a> [private](#module\_private) | ../.. | n/a |
+| <a name="module_private-explicitly"></a> [private-explicitly](#module\_private-explicitly) | ../.. | n/a |
 
 ## Resources
 
diff --git a/tests/public/1-example.tf b/tests/public/1-example.tf
index b22a098..7a1fc86 100644
--- a/tests/public/1-example.tf
+++ b/tests/public/1-example.tf
@@ -4,3 +4,10 @@ module "public" {
   name = "dasmeta-dev-public-1"
   acl  = "public"
 }
+
+module "public-read" {
+  source = "../.."
+
+  name = "dasmeta-dev-public-read-1"
+  acl  = "public-read"
+}
diff --git a/tests/public/README.md b/tests/public/README.md
index f988b34..b67fe59 100644
--- a/tests/public/README.md
+++ b/tests/public/README.md
@@ -14,6 +14,7 @@ No providers.
 | Name | Source | Version |
 |------|--------|---------|
 | <a name="module_public"></a> [public](#module\_public) | ../.. | n/a |
+| <a name="module_public-read"></a> [public-read](#module\_public-read) | ../.. | n/a |
 
 ## Resources
 
diff --git a/variables.tf b/variables.tf
index 8e3e756..953253b 100644
--- a/variables.tf
+++ b/variables.tf
@@ -5,7 +5,7 @@ variable "name" {
 
 variable "acl" {
   type        = string
-  default     = null # "private"
+  default     = "private"
   description = "The acl config for bucket, NOTE: 'acl' conflicts with 'grant' and 'owner'."
 }