I'm using AWS Amplify library Storage module to access S3 objects and can able to read/write objects in S3. If I'm not wrong Amplify Storage module uses Presigned URLs for GET and PUT.
Now I've a requirement to restrict S3 object access only through VPN. I presume the presigned URLs work over internet.
Please suggest a solution to restrict S3 object access only through VPN.