Ions are functions that run in the same JVM as your Datomic Cloud system. They can contain arbitrary Clojure code, including using external AWS services. You will need to configure your Ions using AWS IAM policies to grant them the AWS permissions necessary for their specific uses of other AWS services.