allow deploying instances into public subnet