$ ssh ubuntu@bastion-uswest2.packet.global
ubuntu@ip-10-0-0-192:~$ ls
_bastion
ubuntu@ip-10-0-0-192:~$ exit
$ ssh -J ubuntu@bastion-uswest2.packet.global ubuntu@private-uswest2.packet.global

ubuntu@ip-10-0-1-96:~$ ls
_private
ubuntu@ip-10-0-1-96:~$ ping www.google.com
PING www.google.com (172.217.3.196) 56(84) bytes of data.
64 bytes from sea15s12-in-f4.1e100.net (172.217.3.196): icmp_seq=1 ttl=97 time=7.20 ms
ubuntu@ip-10-0-1-96:~$ wget www.google.com (www.google.com)|172.217.3.196|:80... connected.
HTTP request sent, awaiting response... 200 OK
index.html [ <=> ] 12.69K --.-KB/s in 0s

REPORT RequestId: b60e1ed6-aeb0-41ac-9449-22751b8d4bdd	Duration: 17.45 ms	Billed Duration: 18 ms	Memory Size: 128 MB	Max Memory Used: 64 MB	Init Duration: 148.93 ms

biometric:~ michaelobrien$ python --version
Python 2.7.16
biometric:~ michaelobrien$ python3 --version
Python 3.9.4
$ pip --version
pip 20.2.3 from c:\users\micha\appdata\local\programs\python\python39\lib\site-packages\pip (python 3.9)

biometric:refarch michaelobrien$ aws --version
aws-cli/2.1.29 Python/3.8.8 Darwin/19.6.0 exe/x86_64 prompt/off

biometric:cloudformation michaelobrien$ aws cloudformation deploy --template-file vpc-cfn.yaml --stack-name vpc --region=us-west-1
Waiting for changeset to be created..
Waiting for stack create/update to complete
Successfully created/updated stack - vpc
update the yaml - rerun deploy to  UPDATE  the stack
delete the stack
aws cloudformation delete-stack --stack-name vpc --region=us-west-1

For stacks over 50Kb - upload to S3 first
aws s3 mb s3://cf-uswest1-packet-global --region=us-west-1


https://s3.us-west-1.amazonaws.com/cf-us-west-1-packet-global/main.template.yaml

import uuid
import boto3
def lambda_handler(event, context):
    # Get the service client.
    s3 = boto3.client('s3')
    # Generate a random S3 key name
    upload_key = uuid.uuid4().hex
    # Generate the presigned URL for put requests
    presigned_url = s3.generate_presigned_url(
        ClientMethod='put_object',
        Params={
            'Bucket': 'lambda.input.uswest2.packet.global',
            'Key': upload_key
        })
    return {"upload_url": presigned_url}

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "s3:*",
            "Resource": "*"
        }]}

{
  "upload_url": "https://s3.us-west-2.amazonaws.com/lambda.input.uswest2.packet.global/4166f6cae477482ab6b7264fedcea60f?AWSAccessKeyId=ASIA.....D&Signature=UvR..........3D&Expires=1620017193"
}

Function Logs
REPORT RequestId: 5c90fef3-5be0-4da4-8ed0-00ab3d6658fa	Duration: 1261.11 ms	Billed Duration: 1262 ms	Memory Size: 128 MB	Max Memory Used: 76 MB	Init Duration: 261.36 ms

biometric:uipath michaelobrien$ curl --request PUT --upload-file ~/Orion_Head_to_Toe.jpg 'https://s3.us-west-2.amazonaws.com/lambda.input.uswest2.packet.global/4166f6...'

Create OPTIONS method
Add 200 Method Response with Empty Response Model to OPTIONS method
Add Mock Integration to OPTIONS method
Add 200 Integration Response to OPTIONS method
Add Access-Control-Allow-Headers, Access-Control-Allow-Methods, Access-Control-Allow-Origin Method Response Headers to OPTIONS method
Add Access-Control-Allow-Headers, Access-Control-Allow-Methods, Access-Control-Allow-Origin Integration Response Header Mappings to OPTIONS method
Add Access-Control-Allow-Origin Method Response Header to POST method
Add Access-Control-Allow-Origin Integration Response Header Mapping to POST method

still getting
Access to XMLHttpRequest at 'https://o2d2a1yr22.execute-api.us-west-2.amazonaws.com/test' from origin 'http://portals3.cloudlift.systems' has been blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access-Control-Allow-Origin' header is present on the requested resource.
reran cors config - redeployed api gateway function - that was it

<meta http-equiv="Access-Control-Allow-Origin" content="*"/>