A company is developing a new multi-tier application on Amazon EC2 instances and seeks to enforce the principle of least privilege for network routing and traffic between applications. Which AWS service should be utilized for this purpose?