{
  "Resources": {

    "SubnetA" : {
      "Type" : "AWS::EC2::Subnet",
      "Properties" : {
        "VpcId" : { "Ref" : "Cloud" },
        "CidrBlock" : { "Fn::FindInMap" : [ "SubnetConfig", "A", "CIDR" ]},
        "AvailabilityZone" : {"Fn::Join": ["", [{"Ref": "AWS::Region"}, { "Fn::FindInMap" : [ "SubnetConfig", "A", "AvailabilityZone" ]}]]}
      }
    },

    "SubnetARouter" : {
      "Type" : "AWS::EC2::SubnetRouteTableAssociation",
      "Properties" : {
        "SubnetId" : { "Ref" : "SubnetA" },
        "RouteTableId" : { "Ref" : "PublicRouteTable" }
      }
    },

    "SubnetAFirewall" : {
      "Type" : "AWS::EC2::SubnetNetworkAclAssociation",
      "Properties" : {
        "SubnetId" : { "Ref" : "SubnetA" },
        "NetworkAclId" : { "Ref" : "PublicNetworkACL" }
      }
    },


    "SubnetB" : {
      "Type" : "AWS::EC2::Subnet",
      "Properties" : {
        "VpcId" : { "Ref" : "Cloud" },
        "CidrBlock" : { "Fn::FindInMap" : [ "SubnetConfig", "B", "CIDR" ]},
        "AvailabilityZone" : {"Fn::Join": ["", [{"Ref": "AWS::Region"}, { "Fn::FindInMap" : [ "SubnetConfig", "B", "AvailabilityZone" ]}]]}
      }
    },

    "SubnetBRouter" : {
      "Type" : "AWS::EC2::SubnetRouteTableAssociation",
      "Properties" : {
        "SubnetId" : { "Ref" : "SubnetB" },
        "RouteTableId" : { "Ref" : "PublicRouteTable" }
      }
    },

    "SubnetBFirewall" : {
      "Type" : "AWS::EC2::SubnetNetworkAclAssociation",
      "Properties" : {
        "SubnetId" : { "Ref" : "SubnetB" },
        "NetworkAclId" : { "Ref" : "PublicNetworkACL" }
      }
    },


    "SubnetC" : {
      "Type" : "AWS::EC2::Subnet",
      "Properties" : {
        "VpcId" : { "Ref" : "Cloud" },
        "CidrBlock" : { "Fn::FindInMap" : [ "SubnetConfig", "C", "CIDR" ]},
        "AvailabilityZone" : {"Fn::Join": ["", [{"Ref": "AWS::Region"}, { "Fn::FindInMap" : [ "SubnetConfig", "C", "AvailabilityZone" ]}]]}
      }
    },

    "SubnetCRouter" : {
      "Type" : "AWS::EC2::SubnetRouteTableAssociation",
      "Properties" : {
        "SubnetId" : { "Ref" : "SubnetC" },
        "RouteTableId" : { "Ref" : "PublicRouteTable" }
      }
    },

    "SubnetCFirewall" : {
      "Type" : "AWS::EC2::SubnetNetworkAclAssociation",
      "Properties" : {
        "SubnetId" : { "Ref" : "SubnetC" },
        "NetworkAclId" : { "Ref" : "PublicNetworkACL" }
      }
    }

  }
}