Parent topic: Creating Security Groups
Creating Security Groups

Creating the Cluster Manager Security Group

Security groups are virtual firewalls for your Amazon instances. In order for you and the cluster to communicate with the Aspera Transfer Cluster Manager (ATCM), you must open specific ports by creating the cluster manager security group.
  1. Log into the AWS Console.
  2. Click EC2 under the Compute section. Select Security Groups from the NETWORK & SECURITY section on the left sidebar. Click Create Security Group.
  3. Name this security group atc-manager.
  4. Select your VPC from the VPC drop-down menu.
  5. Click Add Rule and create an inbound rule for each of the ports and protocols listed below to enable connectivity from external systems.
    Type Protocol Port Range Source
    HTTP TCP 80 Anywhere 0.0.0.0
    HTTPS TCP 443 Anywhere 0.0.0.0
    SSH TCP 22 Anywhere 0.0.0.0 (or your custom IP address)
    Note: The cluster manager runs SSH on port 22 for administrative purposes and during the first boot of the cluster nodes. You must use an SSH key when connecting through this port. If you want to limit access to port 22, you must allow your IP address and the IP addresses of the transfer nodes.

  6. Add custom TCP rules for VPC. For example, if your VPC environment has the 172.30.0.0/16 subnet, add the following custom TCP rule:
    Type Protocol Port Range Source
    Custom TCP Rule TCP 5001-5002 Custom IP 172.30.0.0/16


  7. Click Create.
Parent topic: Creating Security Groups