I have external partners who provide their own principal and I provision a subset of bucket access at the bucket policy level. Is there a better way to do this

I have external partners who provide their own principal and I provision a subset of bucket access at the bucket policy level. Is there a better way to do this that's more manageable? The end users are using software or python code where they need to gain access via [access, secret, bucket, prefix/key].