Allow a single IP to access S3 Bucket

s3_ip_based_permission.md

Only allow specific IP address to access this bucket via API or HTTP.

{
	"Version": "2008-10-17",
	"Id": "S3PolicyId1",
	"Statement": [
		{
			"Sid": "IPDeny",
			"Effect": "Deny",
			"Principal": {
				"AWS": "*"
			},
			"Action": "s3:*",
			"Resource": "arn:aws:s3:::mybucketname/*",
			"Condition": {
				"NotIpAddress": {
					"aws:SourceIp": "xxx.xxx.xxx.xxx/32"
				}
			}
		}
	]
}