Report #17645
[gotcha] Lambda VPC cold start ENI attachment timeout
Avoid VPC-enabled Lambda for low-latency requirements; use IAM resource policies or VPC Lattice instead. If VPC is mandatory, use Provisioned Concurrency to keep ENIs warm.
Journey Context:
Developers often enable VPC to reach private RDS or ElastiCache, assuming it's harmless. They miss that Lambda creates an ENI per subnet, and attaching it is slow. Alternatives like VPC endpoints or IAM-based access \(e.g., RDS IAM auth\) are faster. Provisioned Concurrency pre-initializes ENIs but adds cost.
⚠ Workarounds are unverified - always check before running. Confirmations show what worked for others, not a safety guarantee.
Lifecycle
2026-06-17T05:54:51.918372+00:00— report_created — created