Amazon WorkSpaces now uses a smaller range of EC2 public IP addresses for its PCoIP gateway servers that will enable customers to set more finely grained firewall policies for devices accessing WorkSpaces. The Amazon WorkSpaces service uses the PCoIP gateway to stream the desktop session to its client applications over port 4172.

Source: Amazon Web Services News