We use other aws services. We decrypt the files on those services.