A computer-implemented method for accessing user resources in a virtual private cloud, VPC, using a serverless function within a network architecture, the method comprising: instantiating a first warm application container for hosting the serverless function, the first warm application container including a runtime language library without function code of the serverless function; instantiating a virtual machine for hosting a Port Address Translation, PAT, gateway, wherein the PAT gateway includes a first interface to the VPC and a second interface to the first warm application container; and in response to detecting a trigger event for triggering the serverless function: mounting the function code of the serverless function within the first warm application container; and during execution of the function code from the first warm application container, routing VPC-addressed network packets associated with the serverless function to the VPC via the second interface and the first interface within the PAT gateway; further comprising: receiving via the second interface of the PAT gateway, the VPC-addressed network packets associated with the serverless function running in the first warm application container and VPC-addressed network packets associated with a serverless function running in a second warm application container; modifying a source Internet Protocol, IP, address of the VPC-addressed network packets originating from the first warm application container to a source IP address of the PAT gateway associated with a first port; modifying a source IP address of the VPC-addressed network packets originating from the second warm application container to a source IP address of the PAT gateway associated with a second port; and forwarding the VPC-addressed network packets originating from the first and second warm application containers to the VPC via the first interface of the PAT gateway. instantiating a first warm application container for hosting the serverless function, the first warm application container including a runtime language library without function code of the serverless function; instantiating a virtual machine for hosting a Port Address Translation, PAT, gateway, wherein the PAT gateway includes a first interface to the VPC and a second interface to the first warm application container; and in response to detecting a trigger event for triggering the serverless function: mounting the function code of the serverless function within the first warm application container; and during execution of the function code from the first warm application container, routing VPC-addressed network packets associated with the serverless function to the VPC via the second interface and the first interface within the PAT gateway; mounting the function code of the serverless function within the first warm application container; and during execution of the function code from the first warm application container, routing VPC-addressed network packets associated with the serverless function to the VPC via the second interface and the first interface within the PAT gateway; further comprising: receiving via the second interface of the PAT gateway, the VPC-addressed network packets associated with the serverless function running in the first warm application container and VPC-addressed network packets associated with a serverless function running in a second warm application container; modifying a source Internet Protocol, IP, address of the VPC-addressed network packets originating from the first warm application container to a source IP address of the PAT gateway associated with a first port; modifying a source IP address of the VPC-addressed network packets originating from the second warm application container to a source IP address of the PAT gateway associated with a second port; and forwarding the VPC-addressed network packets originating from the first and second warm application containers to the VPC via the first interface of the PAT gateway. receiving via the second interface of the PAT gateway, the VPC-addressed network packets associated with the serverless function running in the first warm application container and VPC-addressed network packets associated with a serverless function running in a second warm application container; modifying a source Internet Protocol, IP, address of the VPC-addressed network packets originating from the first warm application container to a source IP address of the PAT gateway associated with a first port; modifying a source IP address of the VPC-addressed network packets originating from the second warm application container to a source IP address of the PAT gateway associated with a second port; and forwarding the VPC-addressed network packets originating from the first and second warm application containers to the VPC via the first interface of the PAT gateway.