Unlike gsutil.

Note that by default, the gsutil cp command does not copy the object ACL to the new object, and instead will use the default bucket ACL. You can override this behavior with the -p option.