Verify Security Groups

Prev Next

WHAT TO EXPECT

In this section, users will learn how to configure the AWS Security Groups so the instances can communicate correctly.

The security group acts as a virtual firewall that controls inbound and outbound network traffic for EC2 instances and other resources. It consists of a set of rules that define which traffic is allowed to enter or leave an instance (by default, all traffic is blocked because AWS uses the least privilege principle).

To ensure security groups are set up properly for cloudSwXtch:

  1. Navigate to the VPC console.

  2. Select the "Security Groups" link as shown below. (Note: There are multiple equivalent ways to get to the "Security Groups" page.)

  3. Select the Security Group that is normally used to create your EC2 instances for your application.

  4. In order for certain features to work in a given cloudSwXtch, users will need to add inbound rules to open specific ports originating from that security group. The list of ports is outlined in the cloudSwXtch System Requirements article under "Firewall and Security Group Rules." 

  5. If an inbound rule does not exist, create it by clicking "Edit inbound rules." 

  6. Click "Add Rule."

  7. Enter the information like the screenshot shown below, verifying that the ID of the SG on Source matches the SG you are editing.

  8. Save the rule.