Access to cloud systems like Instances are governed by Security Groups.
Add Security Group
Security Group Name is provided along with the VPC that it controls access to, and a description of the group.
Azure and Amazon options are available.
Security Group – Add Azure
Once added, Details can be used to modify settings. When adding a Security Group, errors if any are displayed.
Add Security Group
Security Groups impose connection Rules on images specified using the type of connection, its protocol, port range over which the communication happens, and source of the communication
These are the supported Types of connections –
All traffic – Regardless of protocol, all network traffic is allowed
All TCP – All communication over TCP is allowed. This could include web, SSH, FTP, Telnet, SMTP, IMAP/POP involving web service calls, file transfer, mail, etc.
All UDP – All communication over UDP is allowed. This could include media streaming, games, local broadcasts / discovery services, tunneling/VPN, etc.
SSH – This is a replacement of remote shell programs like Telnet, with encryption being used to protect the contents
SMTP – This is used for email transmission. POP3 – Most recent protocol for receiving email. IMAP – Allows mail client to access email on remote mail server. SMTPS, IMAPS, POP3S are implementations supporting encryption, transferring over SSL.
HTTP – Used to show web pages, with set of rules for file transfer over the World Wide Web. HTTPS has encryption added.
LDAP – Allows access to information directories over the Internet, allowing the sharing of information about users, systems, networks, services, and applications throughout the network
MS SQL – Microsoft SQL Server communicates over a specific port which is configurable. MYSQL is an open source SQL implementation and also communicates over a configurable port.
RDP – Allows remote desktop connections