Wait, you don't password protect an S3 Bucket... You can and SHOULD limit what accounts/roles have access to a S3 Bucket or S3 Bucket sub-folder.
Steve, is this a question of whether you should trust your provider (modify your object access AND encrypt files on your own before posting to an object storage service)?