How to allow user to Remote Desktop to server on their subnet that they are belong to?

I configured the webtop to allow users to enter their Remote Desktop Connection IP address to AWS EC2 instance. Next, I want to only allow specific groups to have access on their AWS VPC subnet. We...