I have Lambda that is deployed in the default VPC, that VPC has open Endpoint to S3 service, Lambda has an IAM role that widely opens all S3 operations
iamRol