New pattern: Deny network management actions from Lambda function code.

[jkahn117]

Issue #, if available:

Description of changes:

New pattern to describe an approach to deny various networking-related activities from function code even when those permissions are needed by the Lambda service.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.