Limit access to files stored on Google Cloud Storage

Hello, I have a storage ("bucket") on Google Cloud Storage, and static files in it (.zip files, .jpeg files...). My files at this point have "public access", which means that I have a url adress, for e.g.: [login to view URL] and anyone can just click the link, and download the file. I want to limit this access just a little bit. I want this access to be restricted only to GET requests from specific DOMAIN, which is '[login to view URL]' and '[login to view URL]', and its subdomains '*.[login to view URL]', 'www.*.[login to view URL]'. The goal result should look like that: We have a URL: [login to view URL] End user copy+past this link into his browser, and gets some "access denied" result. But when user clicks on the same link somewhere on my site at '[login to view URL]' - he can download the file. After that, I would also need full instruction, how to implement this soultion, that I could do it myself in my other projects, also in the future.