The instructions for this policy are lacking. The JSON example in the doc doesn't explain that each IP should be added via the + button and shows an array which has confused some customers. Secondly, the client_ip_sources can each be selected which should also be explained, it's not clear that you can select one or more and how you select those.