The new identifier of the subnet that the HSM is in. The new subnet must be in the same Availability Zone as the current subnet.