Even just using IAM to grant permissions is going across those services is going to lock you in.