How to block all file types other than ZIP on an S3 Bucket

Hi, I made a bucket on S3 that is connected to my website where users could upload ZIP files to the bucket. I already configured it on the server level to only enable uploading .zip but I also want to configure it on the S3 bucket level to ensure security. Any ideas what bucket policy do I need to enter to allow only .zip and reject everything else?