{
"Version": "2012-10-17",
"Id": "http referer policy example",
"Statement": [
        {
               "Sid": "Allow get requests originating from www.example.com and example.com.",
               "Effect": "Allow",
               "Principal": "*",
               "Action": "s3:GetObject",
               "Resource": "arn:aws:s3:::s3-foo-bar/*",
               "Condition": {
                       "StringLike": {
                             "aws:Referer": [
                                    "http://www.example.com/*",
                                    "http://example.com/*"
                              ]
                       }
               }
        }

{
"Id": "S3PolicyId1",
"Statement": [
    {
        "Sid": "IPDeny",
        "Effect": "Deny",
        "Principal": {
            "AWS": "*"
        },
        "Action": "s3:*",
        "Resource": "arn:aws:s3:::s3-foo-bar/*",
        "Condition": {
            "NotIpAddress": {
                "aws:SourceIp": "Your IP Address CIDR Notation"
            }
        }
    }
  ]
}