View a markdown version of this page

Securing your environment - Deploying Oracle SOA Suite 12c on AWS

This whitepaper is for historical reference only. Some content might be outdated and some links might not be available.

Securing your environment

AWS provides a secure global infrastructure, plus a range of features that you can use to help secure your systems and data in the cloud. To learn more about AWS Security, refer to the AWS Security Center.

AWS security group configuration

A security group acts as a virtual firewall for your instance to control inbound and outbound traffic. For each security group, you add rules that control the inbound traffic to instances, and a separate set of rules that control the outbound traffic. For more information on security groups, refer to Amazon EC2 security groups for Linux instances.

The following table includes some of the recommended security group rules related to Oracle SOA Suite 12c. This list is not an exhaustive list of inbound rules it is only meant to serve as a reference.

Table 2: Suggested Security Group rules for Oracle SOA Suite 12c

Security Group Inbound traffic type Inbound port (example*)
Load Balancer Security Group ELB http 80
ELB https (SSL) 443
Application Security Group SOA Admin Server 7001
SOA Managed servers 7003, 7005, 7007
OSB Admin server 8001
OSB Managed servers 8003
ADF Admin server 9001
ADF Managed servers 9003, 9005
BPM Admin Server 10001
BPM Managed Servers 10003, 10005, 10007
Any other SOA component <Add as per your configuration>
Oracle Coherence port 9991
WebLogic Node manager 5555 - 5558
Database Security Group Oracle Database 1521
Web Security Group Oracle HTTP Server (OHS) 7777

*The port numbers might change depending on your configuration.