title: Access Api Gateway API operation from VPC?
body: <p>I am trying to figure out how to access the Api Gateway <strong>service</strong> API (aka "Manage Amazon API Gateway") from a lambda running in a VPC. Not I'm <strong>not</strong> trying to invoke an resource method in a private API (I'm aware of how to create an <code>execute-api</code> VPC interface endpoint), just calling an AWS service method (<code>get-api-key</code>, FWIW, using a Python boto3 client). Hope that makes sense, hard to articulate this clearly with so many overloads of "API" here. Current attempts fail with a timeout, so I presume it's VPC-related, but I'm not sure how to provide access. I don't see any obvious endpoint types that would do so. I've seen references to using a NAT gateway for extra-VPC resources, but I'm not clear how (or if) this would apply. <strong>The VPC has a NAT Gateway configured, and the Lambda's security group allows all outbound traffic</strong>, see configurations below. Appreciate any suggestions.</p>
  
  <p><strong>NAT Gateway Configuration</strong></p>
  
  <p><a href="https://i.stack.imgur.com/vbnY7.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/vbnY7.png" alt="NAT Gateway Configuration"></a></p>
  
  <p><strong>Lambda Network Configuration</strong>
  <a href="https://i.stack.imgur.com/ObQjj.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/ObQjj.png" alt="Lambda Network Configuration"></a></p>