Networking requirements
The CloudFormation template performs deployment and configuration tasks that involve network traffic between the existing SMC and FlexEdge Secure SD-WAN engines, which are installed on AWS as EC2 instances. Therefore, network traffic to/from AWS and on-premise locations must be allowed accordingly.
For more information on how to identify the necessary ports and protocols needed to allow SMC API, FlexEdge Secure SD-WAN engines and IPSEC network traffic, see Default communication ports in the Secure SD-WAN Product Guide.