vpc: replace private instances with autoscaling group