Limit S3 web access to only from our Office

bucket-policy.json

{
  "Version": "2012-10-17",
  "Id": "Office-Only access",
  "Statement": [{
    "Sid": "Access-to-Office-IP-only",
    "Effect": "Deny",
    "Principal": "*",
    "Action": "s3:GetObject*",
    "Resource": "arn:aws:s3:::BUCKET_NAME/*",
    "Condition": {
      "NotIpAddress": {
        "aws:SourceIp": [
          "213.186.4.78/32"
        ]
      }
    }
  }]
}