Guided Walkthroughs

Configuration Packages

AI CloudAdvisor (Beta)

By Implementation

Service Control PoliciesConfig RulesAuto Remediation RulesConformance PacksAmazon GuardDutyAmazon InspectorAWS Security HubAWS Network FirewallRoute53 Resolver SecurityAmazon MacieS3 Bucket PoliciesCloudWatch Alarms and Event RulesAWS WAFAWS Secrets ManagerAWS Systems ManagerSecurity Groups & NACLsAWS KMSAWS SSOIAM PoliciesVPC Endpoint PoliciesCloudFormation Guard RulesLoad BalancersRDS Event SubscriptionsAWS Resource Access Manager (RAM)

By Service Protected

Reference Guides

Other

Guided Walkthroughs

Configuration Packages

AI CloudAdvisor (Beta)

Configuration Stack
0

By Service Protected

VPC Security ControlsEC2 Security ControlsIAM Security ControlsS3 Security ControlsRDS Security ControlsOpenSearch/Elasticsearch Security ControlsEFS Security ControlsRoute53 Security ControlsDynamoDB Security ControlsECR Security ControlsEMR SecurityLambda SecurityCloudFormation SecurityCodeX Security ControlsCloudFront SecurityAWS Certificate Manager (ACM) SecurityLogging & Monitoring ConfigurationsBackups & DRBilling and Cost Management

By Implementation

Reference Guides

Other

EFS Security Controls

EFS File System

Configuration to provision a new EFS file system and attach it to a VPC with options to customize encryption, backup, access, and performance settings.

The following settings are available in this template:

  • Automatic Backups: Select to enable automatic backups for the file system
  • Encryption: Enable encryption at rest for the file system and optionally provide a KMS key to be used. If a KMS key is not provided, the default aws/elasticfilesystem key is used
  • Mount Targets: Add mount targets to attach the file system to a VPC. Multiple subnet Ids can be provided and an optional IP address can also be set. Security Group Ids must also be provided to control network access to the file system
  • Performance Settings: Configure performance and throughput modes and optionally configure the provisioned throughput in Mbps for the file system
  • Availability Zone Name to specify the AWS Availability Zone and create a file system that uses One Zone storage classes
  • LifeCycle Settings to specify:
    • When to move files in the file system from primary storage to the IA storage class
    • When to move files that are in IA storage to primary storage
AWS Documentation
Try out CloudAdvisor: An AI-Powered Assistant for AWS Cloud

Items
2
Size
0.5 KB
Missing Parameters
AWSTemplateFormatVersion: "2010-09-09"
Description: ""
Resources:
  EfsFileSystem:
    Type: "AWS::EFS::FileSystem"
    Properties:
      Encrypted: true
      PerformanceMode: "generalPurpose"
      ThroughputMode: "bursting"
      BackupPolicy:
        Status: "ENABLED"
  MountTargetEfsFileSystem1:
    Type: "AWS::EFS::MountTarget"
    Properties:
      FileSystemId:
        Ref: "EfsFileSystem"
      SubnetId: ""
      SecurityGroups:
        - ""
Parameters: {}
Metadata: {}
Conditions: {}

Actions



Customize Template

File System Settings

Network Settings

Performance Settings

Lifecycle Settings

* Required field

Upgrade to Premium for More Features
Sign up

Guided Walkthroughs
Step-by-step configuration wizards for your environment
Dedicated Security Account
AWS Backup Strategy
VPC Connectivity Setup
Automated Patching
All Guides
Configuration Packages
Pre-built packages for common configuration
Common SCPs
CloudFormation Guard Rules
Auto Remediation Rules
IAM Monitoring & Compliance
All Packages
Automated Assessments
  • 350+ security checks
  • Well-architected reviews
  • Detailed compliance reports
  • Remediation templates
  • Email summaries
  • Learn more