No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

The _LaunchTemplate_'s _iamInstanceProfile_ property is _not_ an `aws.iam.InstanceProfile`. It's an inline object with fields _arn_ and _name_.

So you want
```const outboundProxyLaunchTemplate = new aws.ec2.LaunchTemplate(
  `${appName}-launch-template`,
  {
    namePrefix: `${appName}-`,
    iamInstanceProfile: {
      arn: outboundProxyIamInstanceProfile.arn,
      name: outboundProxyIamInstanceProfile.name
    },
    ...
  },
  { dependsOn: outboundProxyIamInstanceProfile },
);```

So the only major blocker I have now is:

```        * Error creating Auto Scaling Group: ValidationError: You must use a valid fully-formed launch template. Security group sg-024a9e83f1b59c229 and subnet subnet-90c3aaba belong to different networks.
        status code: 400, request id: f2e7928a-d319-4c5e-ade7-45a4ab5ab974```
I’m confused about how to assign the correct subnet ids per instance.

Subnets and SGs are specific to VPCs. You can't put an instance in a subnet in VPC A and associate an SG from VPC B. Would that be the problem here?

Yes, in my case, I have one SG in VPC A, and each instance would be in VPC A, just a different AZ, so a different subnet.  Are you saying I’ll need to create an SG per subnet in VPC A?

No. Just per VPC. SGs can be used by all resources within the same VPC.

Hmm, not sure why I’m getting the error then… the SG should be valid

What is "network" in the error message? I've never used ASGs / launch templates, so I'm missing a bit of context. Maybe for ASGs there's an additional requirement beyond same-VPC?

Can’t tell you right now, but I can get back to you tomorrow.  That’s a good hint.  Our VPC is using `fromExistingId()`, so it could also be related to that.

I can’t see the networks in the diff.  Any idea how I can get these?

I don't even know what "networks" means in that error statement.. which is why I brought it up :slightly_smiling_face: