diff --git a/cmd/coordinator/buildstatus.go b/cmd/coordinator/buildstatus.go
index fb91bfd8c..383ec495e 100644
--- a/cmd/coordinator/buildstatus.go
+++ b/cmd/coordinator/buildstatus.go
@@ -25,7 +25,6 @@ import (
 	"time"
 
 	"cloud.google.com/go/errorreporting"
-	"cloud.google.com/go/storage"
 	"go4.org/syncutil"
 	"golang.org/x/build/buildenv"
 	"golang.org/x/build/buildlet"
@@ -894,7 +893,6 @@ func (st *buildStatus) writeSnapshot(bc buildlet.Client) (err error) {
 	}
 	wr := sc.Bucket(bucket).Object(st.SnapshotObjectName()).NewWriter(ctx)
 	wr.ContentType = "application/octet-stream"
-	wr.ACL = append(wr.ACL, storage.ACLRule{Entity: storage.AllUsers, Role: storage.RoleReader})
 	if n, err := io.Copy(wr, tgz); err != nil {
 		st.logf("failed to write snapshot to GCS after copying %d bytes: %v", n, err)
 		return err
diff --git a/cmd/coordinator/coordinator.go b/cmd/coordinator/coordinator.go
index 93cfbfc6a..24cd07d5a 100644
--- a/cmd/coordinator/coordinator.go
+++ b/cmd/coordinator/coordinator.go
@@ -2025,10 +2025,6 @@ func newBuildLogBlob(objName string) (obj io.WriteCloser, url_ string) {
 
 	wr := pool.NewGCEConfiguration().StorageClient().Bucket(bucket).Object(objName).NewWriter(context.Background())
 	wr.ContentType = "text/plain; charset=utf-8"
-	wr.ACL = append(wr.ACL, storage.ACLRule{
-		Entity: storage.AllUsers,
-		Role:   storage.RoleReader,
-	})
 
 	return wr, fmt.Sprintf("https://storage.googleapis.com/%s/%s", bucket, objName)
 }