EC2 application instances can now restrict traffic that they will accept to a specific load balancer by specifying a Security Group:

To do this, you call the DescribeLoadBalancers API to get the name of the Security Group, and then include that group in the group list when you subsequently launch some EC2 instances. The name of the Security Group can also be obtained from the load balancer details pane in the AWS Management Console.