How to disable Amazon S3 raw endpoint access

Say you want to host a static web site on S3 :

1. You create a bucket with name your-website.com and set it up for web hosting;


2. You add a CNAME in your domain's zone file to point to your S3 bucket.

Great. Everything works fine when you visit your-website.com. But you don't want the raw/"naked" endpoint to be accessible.

Is there any setting in the bucket to disable direct access to your-website.com.s3-website.your-region.amazonaws.com ?