I couldn’t find a way to do it in the framework, but got my use-case working by deploying the project then manually editing the Lambda settings in the AWS console adding the subnet ids and security group ids in the VPC section. The VPC settings persist when the app is redeployed. I thought about having some kind of post-deploy hook that sets the VPC info aws lambda update-function-configuration --function-name my-function --vpc-config SubnetIds=[],SecurityGroupIds=[] but I’m not dynamically adding new projects so manually editing in the console once worked for my use-case.