Why not host them on S3? You can probably serve them directly from there too.
But considering the additional features he's planning on adding, he will probably need to proxy S3 anyway, so not sure if it's worth it in this case.
But for something of the scope of the current API, S3 is the perfect solution.