Advanced AI Prompt for AWS S3 Bucket Least-Privilege Policy Generation

Act as a Senior Cloud Security Architect. Generate a highly secure, JSON-formatted AWS S3 Bucket Policy for [BUCKET_NAME] that enforces absolute least-privilege access specifically for [IAM_ROLE_ARN]. The policy must utilize strict `Condition` blocks to restrict access exclusively to the [ALLOWED_IP_RANGE] (`aws:SourceIp`) and mandate that the request originates from the specified [VPC_ID] (`aws:sourceVpc`). Crucially, include an explicit `Deny` statement blocking any non-SSL requests (`aws:SecureTransport: false`). Restrict allowed actions to specific API calls (e.g., `s3:GetObject`, `s3:PutObject`) instead of using wildcards (`s3:*`). Include technical inline comments detailing the Zero-Trust rationale for each statement block.