This is probably one of my most common conversations with any security team.
"What do you mean you have no access to the data"?
Today's lakeFS pro tip: You can use lakeFS to read and write versioned data, without the data itself ever going through a lakeFS server!
How is that magic possible? 🤔
The answer is pre-signed URLs! These are short-lived, pre-authenticated URLs, supported on all object stores.