How to limit access to S3 files with ACL set to private?

[Abdillah]

Currently when the ACL is set to private, the file still accessible. When I use the object storage link, it returns Access Denied already (means the ACL works).