In my current app, we use cloudfront to serve browser requests. So it’s cloudfront that talks to S3 and deals with authentication, buckets etc. The requests from the web browser don’t know about the bucket.

S3 is designed for API access, not as a website.