specifically set the AZ for RDS subnets, so we span at least 2 AZs.