KCINFR-979: s2s service apis for s2s objects

all the integration tests pass... no need to run them locally @yyuan1