Port 22

AWS fixes 'confused deputy' vulnerability in AppSync