Lambda function uses VPC subnets in at least two AZs

resource "aws_lambda_function" "<example_resource_name>" {
  function_name = "<example_resource_name>"
  role          = "<example_role_arn>"
  handler       = "index.handler"
  runtime       = "python3.12"
  filename      = "function.zip"

  vpc_config {
    subnet_ids         = ["<subnet_id_az1>", "<subnet_id_az2>"] # Critical: subnets in different AZs
    security_group_ids = ["<example_security_group_id>"]
  }
}

Resources:
  <example_resource_name>:
    Type: AWS::Lambda::Function
    Properties:
      Role: <example_role_arn>
      Handler: index.handler
      Runtime: python3.12
      Code:
        ZipFile: |
          def handler(event, context):
            return ""
      VpcConfig:
        SecurityGroupIds:
          - <example_security_group_id>
        SubnetIds:
          - <subnet_id_az1>  # Critical: select subnets in different AZs
          - <subnet_id_az2>  # Critical: ensures function operates in >=2 AZs