add capability in s3_bucket_policy to restrict/inspect regions

[aaronlippold]

[aaronlippold]

You might want to investigate an S3 bucket policy that places conditions on the requester's source IP, and use the advertised AWS IP ranges for us-east-1.

Also, CloudFront has a geo-blocking feature but it would only allow you to block/allow by country. Plus, as Michael - sqlbot indicates, it would not be free of charge.

[aaronlippold]

https://stackoverflow.com/questions/44638983/restrict-s3-bucket-access-to-specific-regions