This CloudFormation template creates a security group for Amazon EFS that allows inbound NFS access from resources associated with this security group. It allows TCP traffic on port 2049.

CloudFormation Template