Hi Dave, thanks for the comment. I didn't, primarily because I used a Lambda Custom Resource in the example to get the API VPC Endpoint details - very easy to do in CDK but a bit more work in CloudFormation ( a simpler way is to pass in the VPC Endpoint IP Addresses as parameters )