password protect prometheus access
Prometheus doesn't have any built-in authentication or authorisation (there's just too many possible configurations), however you can use a reverse proxy to achieve this.
http://www.robustperception.io/adding-basic-auth-to-prometheus-with-nginx/ describes one way to do it.