If you haven't already created any of the resources involved, you might be tempted to use awsx.ec2.Vpc to do most of the heavy lifting for you. It's a great resource if you just want to "fire and forget" your VPC, subnets, etc. I think it will create all the resources you need, except that final lambda. Note that you may find you need to configure some of those resources more than awsx allows you do (it's a convention-over-configuration library): there is a slight risk that you might have to give up on awsx and do the whole thing in aws.