shinyapps io bucket policy for https S3 access

Posit Professional & Hosted Products shinyapps.io
1

I'm looking at enabling https access for S3 from my shinyapps.io hosted app

Is the address list on https://support.posit.co/hc/en-us/articles/217592507-How-do-I-give-my-application-on-shinyapps-io-access-to-my-remote-database- correct for this?

Currently I'm using a bucket policy like

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Principal": "*",
            "Action": "s3:GetObject",
            "Resource": "arn:aws:s3:::example-bucket-data/*",
            "Condition": {
                "IpAddress": {
                    "aws:SourceIp": [
                        "54.204.34.9/32",
                        "54.204.36.75/32",
                        "54.204.37.78/32",
                        "34.203.76.245/32",
                        "3.217.214.132/32",
                        "34.197.152.155/32"
                    ]
                }
            }
        }
    ]
}

but I'm seeing 403 Forbidden currently... If I add my own address to that IP list it does seem to enable http download, so I think this is close to being correct...

It's late now - I'm probably just doing something obvious wrong.. will try again tomorrow!