I have a simple bucket that looks like images.mysite.com on my S3 and other buckets containing backups, etc.
images.mysite.com
I want to allow a specific user to be able
No, it's not currently possible to limit users to view selective buckets under root or anywhere else. You have only those 3 options right now.
I chose to ask the client to use the bucket name explicitly.