Security groups are set up to control network traffic to the instances in the system.
Cloudbreak uses public IP addresses when communicating with cluster nodes. On AWS, you can configure it to use private IPs instead. For instructions, refer to the instructions for Configuring communication via private IPs on AWS.
To learn about ports required for Cloudbreak and Cloudbreak-managed clusters, refer to the following documentation: