VPC with subnet and security groups on 2 AZs