End of support notice: On June 30, 2027, AWS will end support for AMS Advanced. After June 30, 2027, you will no longer be able to access the AMS Advanced console or AMS Advanced resources. For more information, see AMS Advanced end of support.
Default Access Firewall Rules
These are the default firewall rules required to access your instances.
Note
For information on firewall rules and ports required for establishing an AD one-way trust, see the AMS Security Guide by going to the AWS Artifact console -> Reports tab and search for AWS Managed Services.
Linux Stack Instance Ports
These rules are required for your authentication into AMS Linux stacks.
| Port | Protocol | Service | Direction |
|---|---|---|---|
389 |
TCP |
LDAP |
Ingress |
389 |
UDP |
LDAP |
Ingress |
88 |
TCP |
Kerberos |
Ingress |
88 |
UDP |
Kerberos |
Ingress |
Windows Stack Instance Ports
These rules are required for your authentication into AMS Windows stacks.
| Port | Protocol | Service | Direction |
|---|---|---|---|
88 |
TCP | UDP |
Kerberos |
Ingress and Egress |
135 |
TCP | UDP |
DCE/RPC Locator service |
Ingress and Egress |
389 |
TCP | UDP |
LDAP |
Ingress and Egress |
3268 |
TCP | UDP |
msft-gc, Microsoft Global Catalog (LDAP service which contains data from Active Directory forests) |
Ingress and Egress |
445 |
TCP |
Microsoft-DS Active Directory, Windows shares |
Ingress and Egress |
49152 - 65535 |
TCP |
Dynamic or private ports that cannot be registered with IANA. This range is used for private, or customized services or temporary purposes and for automatic allocation of ephemeral ports. |
Ingress and Egress |
