pg_baseback could not connect in AWS linux 2

Hello,          I got an error issue with pg_basebackup from sql01 to sql02.  I Initdb on sql01 fine and created replicauser, set all parameters in postgresql.conf, and authenticate connection in pg_hba.conf.   When I run pg_basebackup, could not connect to server: connection time out.  Is the server running on host "x.x.x.204" and accepting TCP/IP connections on port 5432.I see the listen for port 5432 on sql01 but not in sql02.
$netstat -nlp | grep 5432tcp    0  0  0.0.0.0:5432  0.0.0.0:*  LISTEN 5295/postmaster  /var/run/postgresql/.s.PGSQL.5432
tcp6  0  0  :::5432            :::*            LISTEN 5295/postmaster  /tmp/.s.PGSQL.5432 unix  2  [ACC]  STREAM    LISTENING   33401  5295/postmaster   /var/run/postgresql/.s.PGSQL.5432unix  2 [ACC]  STREAM    LISTENING   33940  5295/postmaster   /tmp/.s.PGSQL.5432
but netstat is not listened in sql02.
pg_hba.conf in sql01:# locallocal    all   all                              peer# IPv4host     all   all    127.0.0.1/32   identlocal     all   postgres                  trust#  IPv6host      all  all    ::1/128             ident#replication privilegelocal    replication    all                                 peer      host     replication    all    127.0.0.1/32      ident
host     replication    all    ::1/128               ident
host     replication    all    sql01_ip/32      trust
host     replication    all    sql02_ip/32      trust
any ideas my setting wrong?
v/r,

Bach-Nga

No one in this world is pure and perfect.  If you avoid people for their mistakes you will be alone. So judge less, love, and forgive more.To call him a dog hardly seems to do him justice though in as much as he had four legs, a tail, and barked, I admit he was, to all outward appearances. But to those who knew him well, he was a perfect gentleman (Hermione Gingold)
**Live simply **Love generously **Care deeply **Speak kindly.*** Genuinely rich *** Faithful talent *** Sharing success