def new_statement(self, arn, ip):
        return {
                    "Effect":"Allow",
                    "Action":"*",  # Docs say use GET, but denies unless *
                    "Resource": arn,
                    "Condition": {
                        "IpAddress": {
                            "aws:SourceIp": [ip]
                            }
                        }
                    }
Returns a new policy statement that will allow
dataset/ETHPy150Open darcyliu/storyboard/boto/cloudsearch/optionstatus.py/ServicePoliciesStatus.new_statement