Restore from S3 is launching the worker in the wrong subnet.
Background
A user may configure workers for S3 copy and File level restores, but when doing a restore from S3 the worker may get launched in a subnet other than what is defined in the Worker configuration screen in the CPM Console.
This is the default behavior for a restore from S3 - The restore jobs Worker configuration overrides the settings defined in the CPM Console screen Worker Configuration.
Resolution
To set the worker configuration on the Recovery screen, there is a tab for the worker configuration, and that's where the subnet is set: