Question

A developer deploys a Lambda function inside a VPC private subnet so it can query an Amazon RDS instance. The same function must also read configuration objects from an Amazon S3 bucket. After moving the function into the VPC, the RDS queries succeed but every S3 call now times out. The team wants to restore S3 access at the lowest ongoing cost without exposing the function to the public internet. What should the developer do?

Accepted Answer

Create an S3 gateway VPC endpoint and update the subnet route table to route S3 traffic through it.

Answer

Attach an internet gateway to the VPC and assign a public IP to the Lambda function's elastic network interface.

Answer

Deploy a NAT gateway in a public subnet and route the private subnet's outbound traffic through it.

Answer

Increase the Lambda function timeout and memory so the S3 requests have time to complete.