@CJ-Infantino I added a bucket policy that restricts all hotlinking except from my site itself. I am using a Deny with a StringNotLike condition.
This is what works for me:
{
"Version": "2008-10-17",
"Id": "preventHotLinking",
"Statement": [
{
"Sid": "Allow get requests referred by example.com",
"Effect": "Deny",
"Principal": {
"AWS": "*"
},
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::exampleBucket/*",
"Condition": {
"StringNotLike": {
"aws:Referer": [
"http://example.com/*",
"https://example.com/*"
]
}
}
}
]
}
