I would like to resell S3 storage. The best way would be to restrict bucket access on a per key basis.
This would restrict read write access of the key to a single bucket.
It would be also fantastic to allow seperate billing and or restrict bucket size.
I would rather not use a complicated authentication method or a 3rd party service.