make subnets optional, so private subnets not required
ensure ASG having no load balancers does not trigger full ELB retrieve