Need a VPCE for ELB to run Lambda

[jackexu]

amazon-rds-crossaccount-access/CrossAccountRDSAccess.yml

Line 144 in 9eca428

SubnetIds: !Ref pSubnetsGroup

If the Subnets used are all private and without a NAT, then this Lambda won't run and return error below

[ERROR] EndpointConnectionError: Could not connect to the endpoint URL: "https://elasticloadbalancing.us-east-1.amazonaws.com/"

The best way to solve this issue is to create a Interface VPC Endpoint for elasticloadbalancing.us-east-1.amazonaws.com with Private DNS names enabled and then allow traffic Lambda Security Group in the VPCE SG.