amazon web services - Grant access to AWS S3 bucket/folder to users without AWS account -

i want make video on demand service using aws s3 , , restrict each of clients own bucket/folder (which 1 schema best..) . want client have access bucket/folder, these people not going have aws account.

i read ,and still reading, iam users,roles , policies have not found pointing want achieve.

if know ip address (or cidr blocks) of each client, can restrict bucket policy.

http://blogs.aws.amazon.com/security/post/txpojby6fe360k/iam-policies-and-bucket-policies-and-acls-oh-my-controlling-access-to-s3-resourc

http://docs.aws.amazon.com/amazons3/latest/dev/example-bucket-policies.html

alternatively, set iam accounts them within own account, , scope access accordingly. let them use limited form of aws console. can write iam policies users automatically have access like:

s3://your-bucket/%username%/