Cannot Restrict Lambda Actions Based on Private IP Addresses in a Service Control Policy

~~
ACM.313 #IPAddress and #NotIPAddress conditions don’t work for Lambda on Private IP addresses in an #AWS #SCP when using a #VPC Endpoint
~~

https://medium.com/cloud-security/aws-ip-conditions-in-an-scp-not-working-with-private-ip-ranges-and-lambda-vpc-endpoint-22ff7a7647ca