Configure Fleet to follow the public/private selection.
Don’t hardcode the region. And remove az.

I just realized that availability zone is unknown
at CloudFormation template evaluation time. AZ is
determined at EC2 instance creation time.