Well , you can launch the instances in a amazon VPC , then infront of your App server you can place a Load balancer for traffic. The VPC must have a internet gateway attached to it as well.
To access the whole VPC , you can create a jumpbox/bastion host.