Query from S3
MySQL with Lambda
Shared network storage
Fine-grained IAM policy