Say I have a few services living in a private subnet that need to make external API calls. To achieve this, I implement a lambda living in another VPC that makes the call on their behalf. Now I want to add another layer of security by implementing a forward proxy that does the following: