El firewall de una máquina decide quién puede llamar a cada puerta: el 22 para SSH, el 3389 para Escritorio remoto, el 3306 para la base de datos. Lo correcto es tenerlas cerradas para todo el mundo y abrirlas solo a las IPs que deben entrar. Lo que pasa en la práctica es otra cosa: como abrir a una IP concreta requiere saber cuál es la tuya, saber escribirla en el formato que pide AWS y acordarse de cerrarla después, mucha gente acaba poniendo "0.0.0.0/0", que significa todo internet.
Simplio lo convierte en un clic: "Añadir mi IP" detecta desde dónde estás conectado y autoriza esa dirección en el puerto que elijas. Cuando el técnico termina, se quita igual. Las reglas que ya tenía la máquina se ven en una lista clara, con lo que abren y para quién.
How it works
You open the machine's firewall
On the machine's card, the current rules: port, protocol and who it is open to. "Everyone" is clearly marked.
You press "add my IP" and choose the port
Simplio detects your public IP and creates the rule for that port and that IP. If you want another IP (the customer's office, the technician), you type it in.
When it's no longer needed, you remove it
Each rule has its remove button. The change is applied in AWS immediately and goes into the activity log.
How secure it is
Separate permission
Touching the firewall is an action of its own, granted per person and per machine. Seeing the machine isn't enough.
Everything is logged
Every rule added or removed, with who, when and from which IP. If a port appears open, you know who opened it.
What is already open to everyone is visible
Rules open to the whole internet are highlighted so you can review them. What you can't see, you can't fix.
The same task, in AWS and in Simplio
| On your own in AWS | In Simplio | |
|---|---|---|
| Give a technician SSH access from home | Ask for their IP, open the console, Networking, add a rule with the IP in CIDR format, save | They press "add my IP" (if you've granted them the machine), or you type their IP |
| Remove it afterwards | Remember, and find the rule among the others | A button in the same list |
| Know what is open to the world | Read the rules of every machine, in every region | Marked on the card |
Frequently asked questions
What happens if my IP changes?
Home connections change IP from time to time. If one day you can't get in, you press "add my IP" again and remove the old rule. That's why you should only open what you actually use.
Does it work for EC2 and for Lightsail?
Yes: on Lightsail it is the instance's firewall; on EC2, the machine's security group. Simplio shows and edits whichever applies.