Tagging AWS subnets created outside of Terraform