Nothing to do with moving data. But you can’t move data without authentication.

I want my service to do a $thing. It won’t do $thing without knowing who I am and what permissions I have. The data doesn’t have to cross borders, the service simply needs to function.

Does that make sense? As I said, didn’t do much in AWS, but the principles are sound.