Following LAMBDA Controls are implemented: 1. aws-lambda-m-1: Restrict traffic to functions within own AWS account 2. aws-lambda-r-1: Use AWS KMS CMK for server-side encryption of environment variables