AWS › Amazon EFS (Elastic File System)

How can you control access permissions for files and directories stored in EFS?

Intermediate

Answer

EFS supports standard POSIX style file permissions just like a traditional Linux file system, controlling access at the user and group level, and it also integrates with IAM policies and EFS access points, which let you create application specific entry points into a file system with a defined root directory and enforced user identity, simplifying permission management across multiple applications sharing the same file system.

aws efs create-access-point --file-system-id fs-12345678 --posix-user Uid=1000,Gid=1000 --root-directory Path=/app-data

Real-world example A shared analytics platform creates a separate EFS access point for each team, each pointing to its own root directory within the same file system, ensuring one team cannot accidentally read or modify another team's files.

Common follow-ups: What is the difference between an EFS access point and mounting the file system directly?;Can IAM policies restrict which EC2 instances can mount an EFS file system?

IAM;AWS Secrets Manager & Parameter Store