Associating an NSG with a subnet or NIC