@CJ-Infantino I added a bucket policy that restricts all hotlinking except from my site itself. I am using a Deny with a StringNotLike condition.
This is what works for me:
{ "Version": "2008-10-17", "Id": "preventHotLinking", "Statement": [ { "Sid": "Allow get requests referred by example.com", "Effect": "Deny", "Principal": { "AWS": "*" }, "Action": "s3:GetObject", "Resource": "arn:aws:s3:::exampleBucket/*", "Condition": { "StringNotLike": { "aws:Referer": [ "http://example.com/*", "https://example.com/*" ] } } } ] }
