use VPC ID and support multiple subnets