No matter how you like to participate in developer communities, Pulumi wants to meet you there. If you want to meet other Pulumi users to share use-cases and best practices, contribute code or documentation, see us at an event, or just tell a story about something cool you did with Pulumi, you are part of our community.

Pulumi Community

Don't know, but if it helps, I prefer not to use CIDRs for security groups. Security Groups can have sourceSecurityGroupIds, so put your NLB in secGrpA, and have that be a sourceSecurityGroup for things that need it.

Oh that might only work on ALBs.. :disappointed:

Looks like you use the LoadBalancerSubnetMapping output.