Can AWS Network Firewall allow traffic from an instance using its tags or some other metadata

Can AWS Network Firewall allow traffic from an instance using its tags or some other metadata? Use case: We have an instance in the same subnets as the other instances. We want that instance to access a smaller list of allowed targets (outbound internet domains or only allow that instance to access a target and not the other instances within the same subnets