Midhun,
If your requirement is to connect to SAP server from your SUP workspace means it depends on your SAP instance. I don't think that you need to open any port for it since you are accessing it from AWS.
But I followed the steps on this guide http://scn.sap.com/docs/DOC-30502 and in that case the AWS is in the cloud, but my SAP server is behind a firewall.
The ports 2000, 5001 and 2480 are to be opened in the SUP server. Usually development of the mobile apps will not be performed in SUP server itself. I don't understand why you are using the SUP workspace present in SUP server itself.
Again, I have followed the steps on the above link which effectively sets up the development environment. The SUP server is sitting on the AWS machine, as is the SUP SDK. That is fine, I have been able to develop an app and deploy it to my cell phone which was connecting to the AWS on the cloud over the cellular network. So I am pretty confident that my setup of the SUP is fine. The issue is, if I want to consume SAP data, I need access to the SAP application server, which I can't get to because the SUP Server sitting on the AWS machine is outside of the corporate firewall. I need to open up the corporate firewall but the network team won't help me unless I can tell them what ports I am connecting through.
Practically you need to install the SUP SDK in a desktop to do the development of mobile apps.
You are right, when I install the SUP SDK on my local machine (I have tried this), I can connect to the SAP server no problem, I could also connect to my SUP server if I opened up the port, I don't believe this would be an issue either but I haven't asked my networking team to do this because, If I did create a mobile app on my machine, and deployed it to a phone, if that phone was not running on the corporate network, it wouldn't be able to access the data on the SAP server because, the SUP server which sits on the AWS would still have to connect to the SAP server to get the data, which it can't do because it's outside of the firewall.
So therefore I would need to install the SUP server inside my corporate firewall and the only devices that would be able to use it would be devices inside the firewall. Which is not the requirement.