only assign public IPs if EC2 instances are started in public subnets