elb needs to be in the public subnets