Using ACL or NFSACL with EFS

Hello

You can use both IAM identity policies and resource policies to control client access to Amazon EFS resources in a way that is scalable and optimized for cloud environments. Using IAM, you can permit clients to perform specific actions on a file system, including read-only, write, and root access.

Please have a look here https://docs.aws.amazon.com/efs/latest/ug/iam-access-control-nfs-efs.html

Thank You Ganesh

Greetings,

I see you are trying to set detailed access permissions on EFS.

There are a few options you can use to control access to directories and files in EFS.

1. EFS file systems support Unix-style read, write, and execute permissions based on the user and group ID. https://docs.aws.amazon.com/efs/latest/ug/user-and-group-permissions.html

2. Use a Resource Policy to grant read and write access permission to a specific AWS Role. https://docs.aws.amazon.com/efs/latest/ug/security_iam_resource-based-policy-examples.html

3. Create an EFS access point and use an IAM policy to enforce that a specific NFS client, identified by its IAM role, can only access a specific access point. The access point should mount the file system on the directory you wish to grant access to. You can then set permissions on this directory. This option may be more inline with what you are trying to achieve. https://docs.aws.amazon.com/efs/latest/ug/efs-access-points.html#access-points-iam-policy

Additional Resources:

[1] Mounting with EFS Access Points - https://docs.aws.amazon.com/efs/latest/ug/mounting-access-points.html

[2] Mounting with IAM Authorization - https://docs.aws.amazon.com/efs/latest/ug/mounting-IAM-option.html