Access control to your (customer's) data may also be a concern that rules out managed services like RDS.

I'm not sure what is meaningfully different about RDS that wouldn't rule out the cloud in general if that was a concern.