A little background: Corporate wants to make our downloads unavailable to U.S. export-restricted countries like North Korea, Iran, Syria, etc. Restriction by IP-block is considered good enough. (Yes, I know better, but it's a CYA matter for the suits)
Is there a way to implement IP-based ACLs on S3 without having to put a server of my own in the path?
Relatedly, this would seem to be a common requirement - is there a standard blacklist of said IP blocks I can incorporate?