allow instance or interface targets for routes in ec2_vpc