AWS S3 bucket policy for public access and disabling hotlinking

make-public-and-disable-hotlinking.json

{
	"Version": "2012-10-17", // SOME VERSION
	"Id": "",
	"Statement": [
		{
			"Effect": "Allow",
			"Principal": "*",
			"Action": "s3:GetObject",
			"Resource": "arn:aws:s3:::BUCKET-NAME/FOLDER-NAME/*"
		},
		{
			"Sid": "Allow in my domains",
			"Effect": "Allow",
			"Principal": {
				"AWS": "*"
			},
			"Action": "s3:GetObject",
			"Resource": "arn:aws:s3:::BUCKET-NAME/*",
			"Condition": {
				"StringLike": {
	 				"aws:Referer": [
                                                "https://YOUR-DOMAIN.com/*",
						"https://www.YOUR-DOMAIN.com/*",
						"http://localhost:3000/*" // FOR LOCAL TESTING
					]
				}
			}
		},
		{
			"Sid": "Deny access if referer is not my sites",
			"Effect": "Deny",
			"Principal": {
				"AWS": "*"
			},
			"Action": "s3:GetObject",
			"Resource": "arn:aws:s3:::BUCKET-NAME/*",
			"Condition": {
				"StringNotLike": {
					"aws:Referer": [
                                                "https://YOUR-DOMAIN.com/*",
						"https://www.YOUR-DOMAIN.com/*",
						"http://localhost:3000/*" // FOR LOCAL TESTING
					]
				}
			}
		}
	]
}