If I recall correctly, a subnet cannot span multiple AWS availability zones, meaning the main & backup agent would reside in a different subnet, which makes it impossible to share a virtual IP. So keep in mind you'll have to configure failover with hostnames instead. For more information please see Ip Address or HostName.