Amazon AppStream 2.0 now allows you to use your VPC security groups to control network traffic

Amazon AppStream 2.0 now allows you to control network traffic between your streaming instances and the resources in your VPC by using security groups. Security groups provide granular, network-level access controls to streaming instances, and you can use them to manage users’ access to databases, license servers, file shares, or application servers from the streamed applications they use. 
Quelle: aws.amazon.com