It seems `vpc` can be configured, but there is no way of setting the `ingress` or `egress` settings for a function.