Lambda function is deployed inside a VPC

resource "aws_lambda_function" "example" {
  function_name = "<example_resource_name>"
  role          = "<example_role_arn>"
  handler       = "index.handler"
  runtime       = "python3.12"
  filename      = "<example_package.zip>"

  # Critical: VPC config attaches the function to a VPC, providing a VPC ID so the check passes
  vpc_config {
    subnet_ids         = ["<example_subnet_id>"]      # at least one subnet
    security_group_ids = ["<example_security_group_id>"]
  }
}

AWSTemplateFormatVersion: '2010-09-09'
Resources:
  LambdaFunction:
    Type: AWS::Lambda::Function
    Properties:
      FunctionName: <example_resource_name>
      Role: <example_role_arn>
      Handler: index.handler
      Runtime: python3.12
      Code:
        S3Bucket: <example_code_bucket>
        S3Key: <example_code_key>
      # Critical: Attach the function to a VPC by specifying at least one subnet and one security group
      # This sets VpcConfig, which gives the function a VPC ID and makes the check PASS
      VpcConfig:
        SubnetIds:
          - <example_subnet_id>
        SecurityGroupIds:
          - <example_security_group_id>