Sometimes you need to store sensitive data in an S3 bucket and need to be sure it can not be accessed outside of your VPC. AWS offers a variety of ways to protect your data from unauthorized access. But it can be challenging to set up correctly. In the following article I will go over my preferred way of hardening S3 bucket access and provide a ready to use Terraform configuration for you to adapt to your needs.