I can't speak to your other ports, but from the web server point of view the only ports it needs are incoming 80 and 443.
It _might_ use outgoing 443, but that depends if you are doing any webclient stuff from it. and of course outgoing email ports if you are using them.
On AWS there's an external firewall to set - but again it's just the 80 and 443 ports that need to be open, plus whatever you need to do remote access.
cheers
Bruce