Amazon S3 VPC终端节点访问问题

Question

我们需要公开S3存储桶吗？如果我们想使用VPC端点访问存储桶。该存储桶是私有存储桶，我有以下存储桶策略。

{
"Version": "2012-10-17",
"Id": "Policy1415115909152",
"Statement": [
    {
        "Sid": "Access-to-specific-VPCE-only",
        "Effect": "Allow",
        "Principal": "*",
        "Action": "s3:GetObject",
        "Resource": [
            "arn:aws:s3:::bucket-name",
            "arn:aws:s3:::bucket-name/*"
        ],
        "Condition": {
            "StringEquals": {
                "aws:sourceVpce": "vpce-XXXXXXXXX"
            }
        }
    }
]

}

访问它时出现以下错误

403 Forbidden
Code: AccessDenied
Message: Access Denied
RequestId: 3B5263AFE5F08F7D
HostId: M2+BaRG/GqiasUSkPo9rC46aC84pmZHNcbSnA2UcWcHxWntFRWjcli7VdN0wLpnsSZgK659008Y=

我已在存储桶上启用了静态网站托管，Idea可以在VPC中私下访问它。