If you want to use a self-defined security group when buying a cluster, you need to enable port 9022 or select Auto create in Security Group on the MRS console.