I have an opensearch cluster in AWS and have a lambda that uses the OpenSearch API for work like repository registration etc. I read that we needed VPC config for the VPC which I did and it worked out well. Now I need to specify security group for the lambda which to me makes no sense because inbound connections are done internally via AWS Lambda API and for outbound connections, I've read "Secondly, outbound connections from the Lambda function to VPC resources are not restricted in any way by the Lambda function’s security group." in this stackoverflow discussion (the 2nd answer).
Also is this true that outbound connections are not restricted for lambda?
What are your thoughts?