yes but if that's the only way it's approved there is a huge unfilled gap in the current market.

Besides given the near constant issues we see around misconfigured s3 bucket i am not sure the average cloud function meets security standard anyway.