A Lambda function attached to a private VPC subnet times out when calling a public external API. Its code works outside the VPC. Which existing environment configuration should the developer investigate?

1. Only the function name, assuming a private subnet always has direct public internet access.
2. The function subnet outbound routing, translation or other intended egress path, and network access controls.
3. Only a longer log retention period.
4. Only the SDK response serializer.