Verify Security Groups

Prev Next

WHAT TO EXPECT

In this section, users will learn how to configure the AWS Security Groups so the instances can communicate correctly.

The AWS Security Groups act as virtual firewalls using the least privilege principle, and control inbound and outbound network traffic for EC2 instances and other resources. It consists of a set of rules that define which traffic is allowed to enter or leave an instance.

To ensure a security group is set up properly for cloudSwXtch:

  1. Navigate to the VPC console.

  2. Select the "Security Groups"

  3. Select the Security Group that will be used for creating the cloudSwXtch EC2 instance

  4. In order for certain features to work in a given cloudSwXtch, users will need to add inbound rules to open specific ports originating from that security group. The list of ports is outlined in the cloudSwXtch System Requirements page.

  5. If an inbound rule does not exist, create it by clicking "Edit inbound rules." 

  6. Click "Add Rule."

  7. Enter the information like the screenshot shown below, verifying that the ID of the SG on Source matches the edited SG

  8. Save the rule.

  9. Check that the Outbound rules are not blocking the desired ports. By default, AWS creates the Security Groups completely open for sending traffic, but custom-made SGs can have tighter security.