diff --git a/customer-managed/aws/terraform/iam_redpanda_agent.tf b/customer-managed/aws/terraform/iam_redpanda_agent.tf
index 427cbc5..d8ede1e 100644
--- a/customer-managed/aws/terraform/iam_redpanda_agent.tf
+++ b/customer-managed/aws/terraform/iam_redpanda_agent.tf
@@ -901,7 +901,8 @@ resource "aws_iam_role_policy_attachment" "redpanda_agent" {
   for_each = {
     "1" = aws_iam_policy.redpanda_agent["1"].arn,
     "2" = aws_iam_policy.redpanda_agent["2"].arn,
-    "3" = aws_iam_policy.redpanda_agent["3"].arn
+    "3" = aws_iam_policy.redpanda_agent["3"].arn,
+    "ssm" = "arn:aws:iam::aws:policy/AmazonSSMManagedInstanceCore"
   }
   role       = aws_iam_role.redpanda_agent.name
   policy_arn = each.value
diff --git a/customer-managed/aws/terraform/outputs.tf b/customer-managed/aws/terraform/outputs.tf
index f3b5c29..3ebc04b 100644
--- a/customer-managed/aws/terraform/outputs.tf
+++ b/customer-managed/aws/terraform/outputs.tf
@@ -39,7 +39,7 @@ output "vpc_arn" {
 }
 
 output "private_subnet_ids" {
-  value       = jsonencode([for o in data.aws_subnet.private : o["arn"]])
+  value       = [for o in data.aws_subnet.private : o["arn"]]
   description = "Private subnet IDs created"
   precondition {
     condition     = length(data.aws_subnet.private) > 0
diff --git a/customer-managed/aws/terraform/variables.tf b/customer-managed/aws/terraform/variables.tf
index b0ac266..b128a27 100644
--- a/customer-managed/aws/terraform/variables.tf
+++ b/customer-managed/aws/terraform/variables.tf
@@ -16,7 +16,11 @@ variable "aws_account_id" {
 
 variable "public_subnet_cidrs" {
   type        = list(string)
-  default     = []
+  default     = [
+    "10.0.1.0/24",
+    "10.0.3.0/24",
+    "10.0.5.0/24"
+  ]
   description = <<-HELP
   One public subnet will be created per cidr in this list.
   HELP
@@ -27,10 +31,7 @@ variable "private_subnet_cidrs" {
   default = [
     "10.0.0.0/24",
     "10.0.2.0/24",
-    "10.0.4.0/24",
-    "10.0.6.0/24",
-    "10.0.8.0/24",
-    "10.0.10.0/24"
+    "10.0.4.0/24"
   ]
   description = <<-HELP
   One private subnet will be created per cidr in this list.