vpce endpoint s3 bucket policy

gistfile1.json

{
	"Version": "2012-10-17",
	"Statement": [
		{
			"Sid": "Get-Access-from-UACT-VPCE-only",
			"Effect": "Allow",
			"Principal": "*",
			"Action": [
				"s3:GetObject",
				"s3:GetBucketLocation"
			],
			"Resource": [
				"arn:aws:s3:::my-uact-bucket/*",
				"arn:aws:s3:::my-uact-bucket"
			],
			"Condition": {
				"StringEquals": {
					"aws:sourceVpce": "vpce-deadbeef"
				}
			}
		}
	]
}