Lambda functions currently may require publicly accessible mgmt address

[mikeoleary]

If Security Groups on mgmt IP addresses are locked down to an IP range, Lambda functions that access devices to query for Active/Standby status will fail, as will functions for actions such as installing the HA iApp.

While these functions would ideally go away or be done by another tool, we may also be able to edit them to use private VPC access using the method below:

https://docs.aws.amazon.com/lambda/latest/dg/configuration-vpc.html
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-lambda-function-vpcconfig.html