for instance if they're all in a private subnet