Routine to open SAP CAL Instance for SAP Support

I checked FAQs before posting but didn't see the answer. Apologies if this is answered and I miss to find it.

We have added our licenses to a CAL instance, 1709 Fully Activated, hosted on AWS and now have contacted SAP support. SAP Support wants to connect to the system.

In our on-premise world, the items are there and relatively clear with Saprouter and other setup.

However, we don't have these CALs configured like on-premise.

What routines/suggestions do you have for this open connection question?

Thanks, Wallace