Hello,
SAP CAL should create a default VPC if you left the default network option. Could you check the network name in the instance details in SAP CAL?
Regarding rules, you just need to go back to the screen in the AWS console that you attached and click on view rules. Port 22 should be open for inbound calls.from anywhere, i.e. from 0.0.0.0/0.
Best regards,
Stanimir