Required Security Groups

Use the instructions provided in the AWS security groups documentation to create these required security groups:

Security Group for the Enterprise Console

Security group name: appd-ec-security-group

Inbound rule: Allow all inbound TCP traffic on ports 22 and 9191

Outbound rules:

  • Allow outbound TCP traffic to appd-appserver-security-group on port 22
  • Allow outbound TCP traffic to appd-db-security-group on port 3388

Security Group for the Controller Appserver

Security group name: appd-appserver-security-group

Inbound rules:

  • Allow all inbound TCP traffic on port 22
  • Allow inbound TCP traffic on ports 8090-8097 from appd-elb-security-group

Outbound rule: Allow outbound TCP traffic to appd-db-security-group on port 3388

Security Group for Database Instances

Security group name: appd-db-security-group

Inbound rule: Allow inbound traffic on port 3388 from appd-appserver-security-group and appd-ec-security-group

Outbound rule: No outbound access allowed

Security Group for Load Balancer in Front of the Controller

Security group name: appd-elb-security-group

Inbound rule: Allow all inbound HTTPS traffic on port 443

Outbound rule: Allow outbound TCP traffic to appd-appserver-security-group on ports 8090-8097