Could not replace network ACLs in VPC subnets