# Open Firewall on AWS

## Open Security Group

Select instance -> Security tab -> Click on security group

<figure><img src="https://3721258189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIV8zRtxst8QuSieBcPNv%2Fuploads%2Fsg6FbSNQOPNYNYhXAOb6%2Fimage.png?alt=media&#x26;token=177ecc5c-c9b8-4333-84b8-8be8911651ad" alt=""><figcaption></figcaption></figure>

## Open a port

In security group click on Edit Inbound rules

<figure><img src="https://3721258189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIV8zRtxst8QuSieBcPNv%2Fuploads%2FaOYuTUgL8U8DSwlNSLmD%2Fimage.png?alt=media&#x26;token=590139ab-ddb5-4fb3-93fe-9d72a8d08726" alt=""><figcaption></figcaption></figure>

Then click Add rule

<figure><img src="https://3721258189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIV8zRtxst8QuSieBcPNv%2Fuploads%2FWGydZfWw4LClkcJcf3Eb%2Fimage.png?alt=media&#x26;token=91b0238f-03f4-48dd-a39d-2e8858a74465" alt=""><figcaption></figcaption></figure>

Fill infomation and save

Type: Custom TCP\
Port: 3389 (or your selected port in tiny)\
Source Anywhere IPv4

<figure><img src="https://3721258189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIV8zRtxst8QuSieBcPNv%2Fuploads%2FAqgBXaHAWgl0HRMJEVkS%2Fimage.png?alt=media&#x26;token=f05a66d7-4daa-4cf8-938c-0a5e8a590c95" alt=""><figcaption></figcaption></figure>

Verify that you see the added rule

<figure><img src="https://3721258189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FIV8zRtxst8QuSieBcPNv%2Fuploads%2FzD8i9g8QuKEyD3IrQEgE%2Fimage.png?alt=media&#x26;token=1e7da3af-dc0e-446d-a2dc-fefd67150cbe" alt=""><figcaption></figcaption></figure>