@average-lifeguard-69220 here's a brief example that creates an EC2 instance in a network's single private subnet:

"use strict";
const pulumi = require("@pulumi/pulumi");
const aws = require("@pulumi/aws");
const awsinfra = require("@pulumi/aws-infra");

const network = new awsinfra.Network("my-vpc", {
    numberOfAvailabilityZones: 1,
    usePrivateSubnets: true,
});

const instance = new aws.ec2.Instance("my-ec2-instance", {
    ami: "ami-7172b611",
    instanceType: "t2.micro",
    vpcSecurityGroupIds: network.securityGroups,
    subnetId: network.subnetIds[0],
});

Worthwhile to make this a public Git gist?