If I was that paranoid, I'd encrypt the files. However I trust Amazon not to look at the contents of S3 buckets (being caught doing so would severely damage their business).
being caught doing so would severely damage
their business
The threat of bad publicity for his employer discourages Andy from looking in the S3 buckets. But it also stops Bob blowing the whistle if he sees Andy looking in the S3 buckets.