AWS S3 特定のリファラーのみ接続可能にする

AWS S3のバケットポリシー設定～リファラーでの制限～ - Qiita

https://qiita.com/CyberMergina/items/76e4ec0970122e861cb7

{      "Version": "2012-10-17",      "Statement": [          {              "Sid": "Public Read Bucket Objects",              "Effect": "Allow",              "Principal": "*",              "Action": "s3:*",              "Resource": "arn:aws:s3:::xxxx.xxxx.xx/*"          },          {              "Sid": "Referer Deny",              "Effect": "Deny",              "Principal": "*",              "Action": "s3:*",              "Resource": "arn:aws:s3:::xxxx.xxxx.xx/*",              "Condition": {                  "StringNotLike": {                      "aws:Referer": [                          "http://sitea.xxx/*",                          "http://siteb.xxxxx/*"                      ]                  }              }          }      ]  }