This aws_launch_template without a “network_interfaces” section fires rule " Allowing public network access to cloud resources is security-sensitive (terraform:S6329)"
I don’t think that’s correct: Without this section, a private IP is being assigned.