Buckets are private by default.

And it's getting harder and harder to make them public because of people misconfiguring them and then going public against AWS when they discover the bill.