i guess if you add the below rule to your iptables it should work else you will be disturbing other rules which is related to block volume attachment that comes pre-configured on those images.
iptables -I INPUT 5 -i ens3 -p tcp --dport 80 -m state --state NEW,ESTABLISHED -j ACCEPT
