Any request without the header, from IAM Principals not in the bucket AWS account will be unauthorized with 403 Access Denied response.
So, yes all that is needed is to add the header to every request.
So, yes all that is needed is to add the header to every request.