How do I set up my S3 bucket policy?

Important Note

This is an advanced tutorial and is not supported by Fetchapp. An Amazon S3 account and an understanding of buckets and bucket policies are required. Consider hiring a developer if you aren't comfortable doing the steps in the tutorial, or use Fetchapp for your file hosting.

Example Policy

Setting up your S3 bucket policy can be done by following these instructions:

https://docs.aws.amazon.com/AmazonS3/latest/user-guide/add-bucket-policy.html

For additional security, the following is a sample bucket policy statement that will ONLY allow traffic from a valid order link, and will deny traffic from expired order links:

{
  "Version":"2012-10-17",
  "Id":"http referer policy example",
  "Statement":[
    {
      "Sid":"Allow get requests originating from your FetchApp account from open orders.",
      "Effect":"Allow",
      "Principal":"*",
      "Action":"s3:GetObject",
      "Resource":"arn:aws:s3:::examplebucket/*",
      "Condition":{
        "StringLike":{"aws:Referer":["https://yourhandle.fetchapp.com/get/*"]}
      }
    },
    {
      "Sid":"Deny requests originating from anywhere other than your FetchApp account.",
      "Effect":"Deny",
      "Principal":"*",
      "Action":"s3:GetObject",
      "Resource":"arn:aws:s3:::examplebucket/*",
      "Condition":{
        "StringNotLike":{"aws:Referer":["https://yourhandle.fetchapp.com/get/*"]}
      }

    }
  ]
}

Note: In the above policy, you'll want to replace yourhandle with the handle of your FetchApp account.