AWS: Bucket Policy Example (Allow Get by Referer)

gistfile1.json

{
    "Version": "2008-10-17",
	"Id": "http referer policy example",
	"Statement": [
		{
			"Sid": "Allow get requests from certain domains (including local development)",
			"Effect": "Allow",
			"Principal": "*",
			"Action": "s3:GetObject",
			"Resource": "arn:aws:s3:::bucket-name-here/*",
			"Condition": {
				"StringLike": {
					"aws:Referer": [
						"http://sub1.domain.com/*",
						"https://sub1.domain.com/*",
						"http://domain.com/*",
						"https://*.domain.dev/*",
						"https://*.domain.com/*",
						"http://sub1.domain.dev/*",
						"https://sub1.domain.dev/*",
						"https://domain.com/*",
						"http://s3.amazonaws.com/*",
						"http://*.domain.com/*",
						"http://app-name.herokuapp.com/*",
						"https://app-name.herokuapp.com/*",
						"https://s3.amazonaws.com/*",
						"http://*.domain.dev/*", 
						"http://localhost*/*", 
						"http://localhost:*/*", 
						"https://localhost*/*", 
						"https://localhost:*/*"
					]
				}
			}
		}
	]
}