amz-s3-bucket-policy

{
	"Version": "2008-10-17",
	"Id": "0c762de8-f56b-488d-a4a4-20d1cb31df2f",
	"Statement": [
		{
			"Sid": "Allow in my domains",
			"Effect": "Allow",
			"Principal": {
				"AWS": "*"
			},
			"Action": "s3:GetObject",
			"Resource": "arn:aws:s3:::<Bucket Name>/*",
			"Condition": {
				"StringLike": {
					"aws:Referer": ["http://<allowed referrer site(s)>/*", "http://www.<allowed referrer site(s)>/*"]
				}
			}
		},
		{
			"Sid": "Give not access if referer is no my sites",
			"Effect": "Deny",
			"Principal": {
				"AWS": "*"
			},
			"Action": "s3:GetObject",
			"Resource": "arn:aws:s3:::<Bucket Name>/*",
			"Condition": {
				"StringNotLike": {
					"aws:Referer": ["http://<allowed referrer site(s)>/*", "http://www.<allowed referrer site(s)>/*"]
				}
			}
		}
	]
}