AWS Security Groups

If you host your SmartFile appliance on Amazon Web Services (AWS), you can use AWS Security Groups to create and manage an IP whitelist/allow list.

AWS Security Groups are managed via the Amazon VPC console, accessible at https://console.aws.amazon.com/vpc/

When a new rule is added, changed or deleted inside a security group, that new rule is automatically applied to any resources associated with that group.

Adding Rules to a Security Group

Select Security groups from the navigation pane, then select the security group you intend to modify.

Select Add rule for each rule to add. Within this panel is the ability to configure the rule's: Type, Source/Destination Type, and optional Description.

Type allows you to specify which protocol to allow. TCP or UDP, you must enter the port range to allow.

Custom ICMP, you must choose the ICMP type name from Protocol and if applicable the code name from Port range.

For any other type, the protocol and port range are configured automatically.

Next, configure Source Type (inbound rules) or Destination Type (outbound rules) which will allow for the following configuration options to allow traffic:

Select from one of the following options: Custom, Anywhere-IPv4, Anywhere-IPv6, or My IP.

With Custom, enter an IP address in CIDR notation, a CIDR block, a security group, or a prefix list.

With Anywhere-IPv4, traffic will be allowed from or to any IPv4 address and the rule will automatically be added for the 0.0.0.0/0 IPv4 CIDR block.

With Anywhere-IPv6, traffic will be allowed from or to any IPv6 address and the rule will automatically be added for the ::/0 IPv6 CIDR block.

Choose My IP, allow traffic only from or to the local computer's public IPv4 address.

Lastly, you may set an optional Description for the rule, then Save rules.

Updating Security Group Rules

Select Security groups from the navigation pane, then select the security group you intend to modify.

Choose Actions, Edit inbound rules or Actions, Edit outbound rules to update the rule as required. Save rules.

Deleting a Security group rule

Select Security groups from the navigation pane, then select the security group you intend to modify.

Choose Actions, Edit inbound rules or Actions, Edit outbound rules. Then choose the Delete button next to the rule you wish to delete. Save rules.