While self deploying metlo on custom VPC, the cloudformation stackset fails.
The reason is MetloSecurityGroup is created in a VPC provided in parameters however the MetloInstance doesnt consider the VPC parameter and creates in a default VPC.
So the stackset fails due to the following error and rolls back:
Security group sg-xxxxxxxxxxx and subnet subnet-yyyyyyyyyyyyy belong to different networks. (Service: AmazonEC2; Status Code: 400; Error Code: InvalidParameter; Request ID: aaa-bbb-ccc; Proxy: null)