Bucket Access Policies — Restrict by IP
Lock storage buckets down to the networks you trust. A new bucket policy editor lets you allow access only from specific IP ranges — using either a guided visual builder or a raw JSON editor.
What's changed
- Restrict bucket access to specific source IP ranges (CIDR allow-lists)
- Guided visual policy builder — set effect, actions, resources, and IP conditions without hand-writing JSON
- Raw JSON editor with live validation for advanced policies
- Custom policies merge automatically with your public-access setting and scoped access keys
- Built-in guardrails block any policy that would lock you out of managing your own bucket