Today I open sourced a Lambda extension that provides a SOCKS5 proxy to the function. That proxy connects to your Tailscale VPN network. You can of course use this as a responsible way to avoid AWS's usurious Managed NAT Gateway data processing charges.

https://github.com/QuinnyPig/tailscale-layer