Host Lambda inside a VPC

[kunduso]

The Lambda requires access to the Secrets Manager resource and RDS instance to rotate the password. Hence, it requires vpc_config{} with subnet_ids and security_group_ids. It also requires access to the Secrets Manager via aws_vpc_endpoint resource and appropriate aws_security_group_rule on port# 443.
Attach the managed policy AWSLambdaVPCAccessExecutionRole to the Lambda role.

[kunduso]

more info at https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AWSLambdaVPCAccessExecutionRole.html