...

• an external firewall,
• the operating system firewall of the instance (see Installing the VPC License Server Software and Client in a Cloud Environment),
• security list of the subnet to which the instance belongs, and
• VNIC-specific Network Security Groups.

...

Please see the relevant Oracle documentation for more information and configuration detail.

 Traffic is allowed if any rule in any of the relevant lists and groups allows the traffic. Traffic is also allowed if it  is the response traffic of a permitted tracked connection. At least TCP port 8083 must be allowed to enable a license client to access a VPC license server. If the web interface is to be used, TCP port 8084 must also be allowed.

AWS Firewall Considerations

...