Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save TrevorHinesley/639591dd3aaaaa0571facdd097c38bbe to your computer and use it in GitHub Desktop.
Save TrevorHinesley/639591dd3aaaaa0571facdd097c38bbe to your computer and use it in GitHub Desktop.
StackPath CDN Private Bucket Read-Only Policy
{
"Id": "S3PolicyId1",
"Version": "2012-10-17",
"Statement": [
{
"Sid": "StackPathReadOnly",
"Effect": "Allow",
"Principal": {
"AWS": "*"
},
"Action": "s3:GetObject",
"Resource": "arn:aws:s3:::${bucket_name}/*",
"Condition": {
"IpAddress": {
"aws:SourceIp": [
"2a0a:e200:1a00::/40",
"2a0a:e200:1c00::/40",
"2a0a:e200:1100:1100::/64",
"2a0a:e200:1100::/40",
"2a0a:e200:1200:1100::/64",
"2a0a:e200:1200::/40",
"2a0a:e200:1300::/40",
"2a0a:e200:1400::/40",
"2a0a:e200:1500::/40",
"2a0a:e200:1600::/40",
"2a0a:e200:1700::/40",
"2a0a:e200:1900:1100::/64",
"69.16.133.0/24",
"69.16.176.0/20",
"69.16.182.0/24",
"69.16.184.0/24",
"69.16.188.0/24",
"74.209.134.0/24",
"74.209.134.128/25",
"81.171.60.0/24",
"81.171.61.0/24",
"81.171.68.64/26",
"81.171.105.0/24",
"81.171.106.64/26",
"81.171.112.0/24",
"94.46.144.0/20",
"94.46.153.128/25",
"94.46.154.128/25",
"94.46.155.128/25",
"103.66.28.0/22",
"103.228.104.0/24",
"146.88.130.128/25",
"151.139.0.0/17",
"151.139.0.0/19",
"151.139.11.128/25",
"151.139.13.0/24",
"151.139.14.128/25",
"151.139.15.128/25",
"151.139.16.128/25",
"151.139.18.128/25",
"151.139.19.128/25",
"151.139.21.0/24",
"151.139.23.0/24",
"151.139.24.0/25",
"151.139.25.0/24",
"151.139.29.0/24",
"151.139.32.0/24",
"151.139.33.128/25",
"151.139.34.128/25",
"151.139.35.128/25",
"151.139.36.128/25",
"151.139.37.128/25",
"151.139.38.128/25",
"151.139.40.0/22",
"151.139.41.0/24",
"151.139.44.0/22",
"151.139.45.0/24",
"151.139.48.0/22",
"151.139.49.0/24",
"151.139.52.0/22",
"151.139.56.128/25",
"151.139.58.0/23",
"151.139.59.0/24",
"151.139.60.0/22",
"151.139.64.0/23",
"151.139.66.0/23",
"151.139.67.0/24",
"151.139.68.0/22",
"151.139.72.0/22",
"151.139.76.0/23",
"151.139.77.0/24",
"151.139.78.0/23",
"151.139.80.0/22",
"151.139.81.0/24",
"151.139.84.0/22",
"151.139.88.0/23",
"151.139.90.0/23",
"151.139.92.0/23",
"151.139.93.0/24",
"151.139.94.0/23",
"151.139.96.0/23",
"151.139.97.0/24",
"151.139.98.0/23",
"151.139.114.0/23",
"151.139.116.0/23",
"151.139.118.0/23",
"151.139.120.0/22",
"173.245.194.0/24",
"173.245.208.64/26",
"173.245.210.64/26",
"173.245.216.64/26",
"173.245.218.64/26",
"205.185.216.0/22",
"205.185.217.0/24",
"205.185.219.0/25",
"209.197.7.0/24",
"209.197.8.0/21",
"209.197.9.0/24",
"209.197.11.0/24",
"209.197.13.224/27",
"209.197.21.0/24",
"209.197.24.0/21",
"209.197.27.128/25",
"209.197.31.0/25",
"209.234.242.0/25",
"2001:4de0:0110::/64",
"2001:4de0:0210::/64",
"2001:4de0:0410::/64",
"2001:4de0:0510::/64",
"2001:4de0:0610::/64",
"2001:4de0:2010::/64",
"2001:4de0:2110::/64",
"2001:4de0:2210:1::/64",
"2001:4de0:2210::/64",
"2001:4de0:2310::/64",
"2001:4de0:3010::/64",
"2001:4de0:3110::/64",
"2001:4de0:4010::/64",
"2001:4de0:4110::/64",
"2001:4de0:4310::/64",
"2001:4de0:5010::/64",
"2001:4de0:7001:1::/64",
"2001:4de0:7002:1::/64",
"2001:4de0:7003:1::/64",
"2001:1938:7001:1::/64",
"2001:1938:7002:1::/64",
"2001:1938:7003:1::/64",
"2001:1938:7004:1::/64",
"2001:1938:7005:1::/64",
"2001:1938:7006:1::/64",
"2001:1938:7007:1::/64",
"2001:1938:7008:1::/64",
"2407:1580:1100::/40",
"2407:1580:1200:1100::/64",
"2407:1580:1200::/40",
"2407:1580:1300::/40",
"2407:1580:1400::/40",
"2407:1580:1500::/40",
"2407:1580:1600::/40",
"2407:1580:1700:1100::/64",
"2407:1580:1700::/40",
"2604:6840:1c00:1100::/64",
"2604:6840:1e00::/40",
"2604:6840:1100::/40",
"2604:6840:1200::/40",
"2604:6840:1300:1100::/64",
"2604:6840:1300::/40",
"2604:6840:1400:1100::/64",
"2604:6840:1400::/40",
"2604:6840:1500:1100::/64",
"2604:6840:1500::/40",
"2604:6840:1600::/40",
"2604:6840:1700::/40",
"2604:6840:1800:1100::/64",
"2604:6840:1800::/40",
"2604:6840:1900::/40",
"2606:ce80:6100:1::/64",
"2606:ce80:6200:1::/64",
"2606:ce80:6300:1::/64",
"2606:ce80:6400:1::/64",
"2606:ce80:6500:1::/64",
"2606:ce80:6600:1::/64",
"2606:ce80:6700:2::/64",
"2606:ce80:6900:1::/64"
]
}
}
}
]
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment