mcpField
E
enabling-lambda-vpc-internet-access

enabling-lambda-vpc-internet-access

github.com/awsCloud & DevOps3.3k6.2k installsUpdated today
Repository

About enabling-lambda-vpc-internet-access

A domain skill for operators configuring internet access for AWS Lambda functions in private VPC subnets. It focuses on NAT Gateway routing and troubleshooting common network issues.

Key features

  1. 01Configure NAT Gateway infrastructure
  2. 02Set private subnet routes
  3. 03Troubleshoot NAT Gateway routing
  4. 04Check security groups and propagation

Use cases

  1. 01Enable internet access for VPC Lambda
  2. 02Investigate Lambda function timeouts
  3. 03Verify route table and subnet associations

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/aws/agent-toolkit-for-aws --skill enabling-lambda-vpc-internet-access

After installing, type/enabling-lambda-vpc-internet-accessin Claude Code to confirm it loaded.

Bundled filesreferences/lambda-vpc-internet-access.md

Details

From the project README

Enabling Lambda VPC Internet Access

Overview

Domain expertise for enabling internet access from AWS Lambda functions running inside VPC private subnets. Lambda functions in a VPC cannot receive public IP addresses, so outbound internet access requires NAT Gateway infrastructure that routes traffic from private subnets through a public subnet to an Internet Gateway.

Enable internet access for a VPC Lambda function

To set up NAT Gateway infrastructure and configure routing for a Lambda function that needs internet access, follow the procedure exactly. See Lambda VPC internet access setup procedure.

Troubleshooting

NAT Gateway not working

Verify the route table associated with the Lambda subnets has a 0.0.0.0/0 route pointing to the NAT Gateway. See the full procedure for details.

Lambda function timeout

Check that security group outbound rules allow the necessary ports and that both the NAT Gateway and Internet Gateway are properly configured.

Network changes not taking effect

VPC networking changes can take 1–2 minutes to propagate. Wait before testing after creating a NAT Gateway or updating route tables.

Route table association issues

Confirm the Lambda function's subnets are associated with the route table that has the 0.0.0.0/0 route to the NAT Gateway.

Comments

Markdown supported