AutoGineer
Generated banner for Enabling Lambda Vpc Internet Access
Generated logo for Enabling Lambda Vpc Internet Access

Enabling Lambda Vpc Internet Access

AWSOfficialPublished by AWS

  • Skill
  • Workflow
  • Cloud and DevOps
  • Apache-2.0
  • No issues found
Download ZIP

From the author

Enables internet access for AWS Lambda functions deployed in VPC subnets by creating NAT Gateway infrastructure, configuring public/private subnet routing, and updating security groups. Use when a VPC-attached Lambda function cannot reach the internet.
— the description by AWS

AutoGineer summary

Written by AutoGineer from the skill’s own files, not by the author

This skill provides a systematic approach for enabling outbound internet connectivity for AWS Lambda functions deployed in private VPC subnets. Since VPC-attached Lambda functions do not receive public IP addresses, they require a NAT Gateway to route traffic to the internet. The skill guides the user through analyzing existing VPC infrastructure, identifying necessary networking components, and planning the deployment of NAT Gateways and associated routing configurations.

What it does

  • Verifies necessary AWS tool availability for network configuration.
  • Analyzes existing Lambda function VPC settings, subnets, and security groups.
  • Examines VPC infrastructure including Internet Gateways, NAT Gateways, and route tables.
  • Plans the implementation of NAT Gateway infrastructure based on current network topology.
  • Provides troubleshooting guidance for common connectivity issues like timeouts or routing errors.

When to use it

  • When a Lambda function deployed in a private VPC subnet requires access to external APIs or services.
  • When troubleshooting connectivity issues for VPC-attached Lambda functions.
  • When setting up new VPC networking infrastructure to support Lambda internet egress.

Advantages

  • Ensures a standardized approach to complex VPC networking tasks.
  • Reduces manual configuration errors by following a defined SOP.
  • Provides clear diagnostic steps for common network-related failures.
  • Promotes secure network design by leveraging private subnets and NAT Gateways.

Usage examples

“I need to give my Lambda function 'data-processor' internet access. Can you help?”
The agent will initiate the workflow, request the function name, and begin analyzing the current VPC and subnet configuration to plan the NAT Gateway setup.
“My Lambda function in a private subnet is timing out when calling an external API.”
The agent will guide you through verifying route table associations and security group rules to ensure the NAT Gateway path is correctly configured.

Install

  1. Download the skill as a ZIP:

    https://autogineer.com/agent-skills/aws/enabling-lambda-vpc-internet-access/download

  2. Unzip it into the cross-client skills folder of your project:

    mkdir -p .agents/skills && unzip enabling-lambda-vpc-internet-access.zip -d .agents/skills

Documentation by AWS

Enabling Lambda VPC Internet Access

Overview

Domain expertise for enabling internet access from AWS Lambda functions running inside VPC private subnets. Lambda functions in a VPC cannot receive public IP addresses, so outbound internet access requires NAT Gateway infrastructure that routes traffic from private subnets through a public subnet to an Internet Gateway.

Enable internet access for a VPC Lambda function

To set up NAT Gateway infrastructure and configure routing for a Lambda function that needs internet access, follow the procedure exactly. See Lambda VPC internet access setup procedure.

Troubleshooting

NAT Gateway not working

Verify the route table associated with the Lambda subnets has a 0.0.0.0/0 route pointing to the NAT Gateway. See the full procedure for details.

Lambda function timeout

Check that security group outbound rules allow the necessary ports and that both the NAT Gateway and Internet Gateway are properly configured.

Network changes not taking effect

VPC networking changes can take 1–2 minutes to propagate. Wait before testing after creating a NAT Gateway or updating route tables.

Route table association issues

Confirm the Lambda function's subnets are associated with the route table that has the 0.0.0.0/0 route to the NAT Gateway.

Files

Requirements and compatibility

Works with: Claude Code, Claude apps, OpenAI Codex, GitHub Copilot, Cursor, Gemini CLI, Kiro, OpenCode, Goose, Amp, Roo Code, JetBrains Junie, Factory Droid, Devin (ex-Windsurf), Mistral Vibe, OpenHands, Letta

“Works with” means the tool reads the open Agent Skills format; a skill written for one tool may use features others lack.

Security

No issues found by our static scan· No issues found

A static scan is not a guarantee. Skills are third-party content: review a skill before you let an agent use it.

Attribution and licence

Published by
AWS
Publisher
AWS (Official)
Source
aws/agent-toolkit-for-aws · skills/specialized-skills/networking-and-content-delivery-skills/enabling-lambda-vpc-internet-access · commit 0a218f8
Licence
Apache License 2.0 (redistribution allowed)
  • LICENSE (added by AutoGineer from LICENSE)
  • NOTICE (added by AutoGineer from NOTICE)
  • ATTRIBUTION.md (written by AutoGineer)
Synced

AutoGineer is not affiliated with or endorsed by AWS or AWS.

Download ZIP

The ZIP holds the skill’s files, its licence files and an ATTRIBUTION.md. Download enabling-lambda-vpc-internet-access.zip