[Security] Scoped down the network access to managed EFS and FSx stor…

[gmarciani]

…age from head node and compute nodes.

In particular, before this change all traffic used to be allowed from head node and compute nodes to the shared storage. With this chnage this access is restricted to the minimum ports required.

For EFS, we restrict access to port 2049.
For FSx, we restct access to ports 988, 1018-1023.

Description of changes

• Describe what you're changing and why you're doing these changes.

Tests

• Describe the automated and/or manual tests executed to validate the patch.
• Describe the added/modified tests.

References

• Link to impacted open issues.
• Link to related PRs in other packages (i.e. cookbook, node).
• Link to documentation useful to understand the changes.

Checklist

• Make sure you are pointing to the right branch.
• If you're creating a patch for a branch other than develop add the branch name as prefix in the PR title (e.g. [release-3.6]).
• Check all commits' messages are clear, describing what and why vs how.
• Make sure to have added unit tests or integration tests to cover the new/modified code.
• Check if documentation is impacted by this change.

Please review the guidelines for contributing and Pull Request Instructions.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.