diff --git a/upup/pkg/fi/cloudup/awstasks/natgateway.go b/upup/pkg/fi/cloudup/awstasks/natgateway.go
index d1e0809870..fa809b74d2 100644
--- a/upup/pkg/fi/cloudup/awstasks/natgateway.go
+++ b/upup/pkg/fi/cloudup/awstasks/natgateway.go
@@ -48,6 +48,9 @@ func (e *NatGateway) Find(c *fi.Context) (*NatGateway, error) {
 	if id == nil && e.Subnet != nil {
 		var filters []*ec2.Filter
 		filters = append(filters, awsup.NewEC2Filter("key", "AssociatedNatgateway"))
+		if e.Subnet.ID == nil {
+			return nil, nil
+		}
 		filters = append(filters, awsup.NewEC2Filter("resource-id", *e.Subnet.ID))
 
 		request := &ec2.DescribeTagsInput{