VpcSubnet

The create, security-group rebind or delete job driving this subnet right now; null when none is. Recomputed on every read rather than remembered from the 202 that started the work, so ANY reader picks the job up — a second device, a cleared browser, another user in the same tenant — and not only the browser that issued the request.

Live interfaces on the subnet, and the number a delete refusal quotes — an interface counts while it is being attached or reclaimed, or while a LIVE machine holds it. Occupancy is reported as data beside state, never folded into it. GET /resource/vpcs/{id}/subnets/{subnetId}/interfaces names the rows behind this number; a subnet with none reads 0.

the date-time notation as defined by RFC 3339, section 5.6, for example, 2017-07-21T17:32:28Z

Display name of the security group bound to the subnet, resolved server-side so a client need not hold a security group list to label the row — the VPC's default group is minted inside the VPC create workflow and appears in no list fetched before it. Nullable is the join's shape rather than a state a live subnet reaches: nsg_id is NOT NULL and the group's row cannot be removed while a subnet names it.

the date-time notation as defined by RFC 3339, section 5.6, for example, 2017-07-21T17:32:28Z