ECS Bucket Policy to deny access for specific IP

Hi, I have created a bucket Policy to deny access for all hosts except from the one specified. I have looked at the data access guide and examples from aws. It seems pretty simple but it doesn't work. I can access the bucket from any hosts.. Any idea ? { "Version": "2012-10-17", "Id": "S3PolicyId1", "Statement": [ { "Sid": "Deny All Except Listed IP", "Effect": "Deny", "Principal": "test-mc-objuser", "Action": [ "s3:*" ], "Resource": [ "bucket-policy-testing/*" ], "Condition": { "NotIpAddress": { "aws:SourceIp": "1.1.1.1" } } } ] }