Fair enough, I dislike having the idea of having disparate systems where one type of the same thing is stored on a different system from a second type of the same thing.

IAM is on the AWS repo aswell isn't it? I guess it wouldn't be so bad then.