I want to block the IP address for people that query my AWS S3 bucket (public read only) more than 100 times per second for a period of time (let's say 24 hours). They might be spam, and they might be trying to hurt my business by bringing in more customers and rising my AWS costs. I haven't yet discovered a policy example that does this. How can these kind of IP addresses be dynamically restricted and released after 24 hours?