S3 Policy allow anyone to GetObject from some the source IPs

s3.policy.json

{
  "Id": "Policy1406075254752",
  "Statement": [
    {
      "Sid": "Stmt1406075248586",
      "Action": [
        "s3:GetObject"
      ],
      "Effect": "Allow",
      "Resource": "arn:aws:s3:::issue.details/*",
      "Condition": {
        "IpAddress": {
          "aws:SourceIp": ["111.111.111.111/24", "222.222.222.222/24"]
        }
      },
      "Principal": {
        "AWS": [
          "*"
        ]
      }
    }
  ]
}