AWS S3 IP whitelisting using Bucket Policy

README.md

Bucket Policy

There are cases where we need to restrict IPs from accessing S3 bucket. But we also know that it's not possible to use Security Groups in S3 buckets. Luckily, there's a Bucket Policy where we can add IP restrictions that will act as a Firewall.

Example

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Deny",
            "Principal": "*",
            "Action": "s3:*",
            "Resource": "arn:aws:s3:::my-bucket/*",
            "Condition": {
                "NotIpAddress": {
                    "aws:SourceIp": [
                        "57.7.22.46/32",
                        "10.128.44.64/27"
                    ]
                }
            }
        }
    ]
}

Reference: https://repost.aws/knowledge-center/block-s3-traffic-vpc-ip