I occasionally run into this and typically I'll find an additional subnet or security groups are the issue.
The security groups typically are a result of someone adjusting the groups out of terraform (mostly me... lol).
The subnets I haven't nailed down yet - it seems that a default subnet gets created. Suspect its probably when I have a failure at a certain point, but then fix the issue and re-apply.
I've found the best way is to just go through the VPC items, look for anything that doesn't line up in regards to the names. Then of course take note of the scenario so you don't end up like me trying to remember what caused it a week later.