AWS internal facing ELB

When you create a load balancer in your VPC, you can specify whether the load balancer is internet-facing (the default) or internal. If you select internal, you do not need to have an internet gateway to reach the load balancer, and the private IP addresses of the load balancer will be used in the load balancer’s DNS record.  You can also specify a security group specific to that ELB.  In EC2 classic, you don't have control over the security group name.