Security group and availability zone from AWS are currently in the compute profile, but having them as attributes of a subnet is a better fit. This allows images to be more portable and does not tie them to specific subnets which reflects how things are actually used.

This might mean adding the ability for a subnet to have an additional dropdown to set the CR type so it knows what additional fields to display based on the CR in use. For an AWS selection that would mean the addition of the security group and availability zone fields. It may mean other things for other CRs.