EFS
Prefix elasticfilesystem, 38 actions · Domain Storage
10 AWS managed policies. 5 have reviewed guidance; the rest have authoritative permission data pending editorial review. 3 are service-linked role policies, shown with permission data only.
User access (4)
- AmazonElasticFileSystemClientReadOnlyAccessReader
- AmazonElasticFileSystemFullAccessAdmin
- AmazonElasticFileSystemReadOnlyAccessReader
- DataScientistHigh privilegeAdmin
Operator and limited (2)
Service roles (1)
- AmazonEFSCSIDriverPolicyOperator
Service-linked roles (3)
Also grants EFS actions (45)
- AccessAnalyzerServiceRolePolicy
- AdministratorAccess
- AIDevOpsAgentAccessPolicy
- AIDevOpsAgentActionsPolicy
- AIOpsAssistantPolicy
- AmazonDataZoneSageMakerEnvironmentRolePermissionsBoundary
- AmazonECS_FullAccess
- AmazonElasticFileSystemsUtils
- AmazonLaunchWizard_Fullaccess
- AmazonLaunchWizardFullAccessV2
- AmazonSageMakerFullAccess
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSAuditManagerServiceRolePolicy
- AWSBackupFullAccess
- AWSBackupOperatorAccess
- AWSBackupServiceLinkedRolePolicyForBackup
- AWSBackupServiceRolePolicyForBackup
- AWSBackupServiceRolePolicyForRestores
- AWSCODAPermissionsBoundary
- AWSCodeBuildAdminAccess
- AWSConfigServiceRolePolicy
- AWSDataSyncFullAccess
- AWSDataSyncReadOnlyAccess
- AWSM2ServicePolicy
- AWSMcpServiceActionsFullAccess
- AWSPartnerLedSupportReadOnlyAccess
- AWSResilienceHubAsssessmentExecutionPolicy
- AWSResilienceHubV2AssessmentExecutionPolicy
- AWSResourceExplorerServiceRolePolicy
- AWSServiceRolePolicyForBackupRestoreTesting
- AWSSupportServiceRolePolicy
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- CloudwatchApplicationInsightsServiceLinkedRolePolicy
- CloudWatchAutomaticDashboardsAccess
- CloudWatchOmniAWSIntegrationPolicy
- PowerUserAccess
- ReadOnlyAccess
- ResourceGroupsTaggingAPITagUntagSupportedResources
- SageMakerStudioProjectRoleMachineLearningPolicy
- SageMakerStudioProjectUserRolePermissionsBoundary
- SecurityAudit
- SupportUser
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
backup clientmount clientrootaccess clientwrite createaccesspoint createfilesystem createmounttarget createreplicationconfiguration createtags deleteaccesspoint deletefilesystem deletefilesystempolicy deletemounttarget deletereplicationconfiguration deletetags describeaccesspoints describeaccountpreferences describebackuppolicy describefilesystempolicy describefilesystems describelifecycleconfiguration describemounttargetsecuritygroups describemounttargets describereplicationconfigurations describetags listtagsforresource modifymounttargetsecuritygroups putaccountpreferences putbackuppolicy putfilesystempolicy putlifecycleconfiguration replicationread replicationwrite restore tagresource untagresource updatefilesystem updatefilesystemprotection
Actions (38)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| elasticfilesystem:Backup | Write | 6 | 4 |
| elasticfilesystem:ClientMount | Read | 8 | 1 |
| elasticfilesystem:ClientRootAccess | Write | 6 | 1 |
| elasticfilesystem:ClientWrite | Write | 7 | 1 |
| elasticfilesystem:CreateAccessPoint | Write | 6 | 3 |
| elasticfilesystem:CreateFileSystem | Write | 7 | 4 |
| elasticfilesystem:CreateMountTarget | Write | 7 | 3 |
| elasticfilesystem:CreateReplicationConfiguration | Write | 7 | 1 |
| elasticfilesystem:CreateTags | Tagging | 7 | 1 |
| elasticfilesystem:DeleteAccessPoint | Write | 6 | 3 |
| elasticfilesystem:DeleteFileSystem | Write | 6 | 6 |
| elasticfilesystem:DeleteFileSystemPolicy | Permissions management | 6 | 1 |
| elasticfilesystem:DeleteMountTarget | Write | 6 | 5 |
| elasticfilesystem:DeleteReplicationConfiguration | Write | 7 | 1 |
| elasticfilesystem:DeleteTags | Tagging | 7 | 1 |
| elasticfilesystem:DescribeAccessPoints | List | 25 | 3 |
| elasticfilesystem:DescribeAccountPreferences | List | 15 | 1 |
| elasticfilesystem:DescribeBackupPolicy | Read | 19 | 3 |
| elasticfilesystem:DescribeFileSystemPolicy | Read | 21 | 3 |
| elasticfilesystem:DescribeFileSystems | List | 39 | 6 |
| elasticfilesystem:DescribeLifecycleConfiguration | Read | 21 | 3 |
| elasticfilesystem:DescribeMountTargetSecurityGroups | Read | 22 | 3 |
| elasticfilesystem:DescribeMountTargets | Read | 37 | 3 |
| elasticfilesystem:DescribeReplicationConfigurations | List | 19 | 3 |
| elasticfilesystem:DescribeTags | Read | 20 | 4 |
| elasticfilesystem:ListTagsForResource | Read | 11 | 2 |
| elasticfilesystem:ModifyMountTargetSecurityGroups | Write | 6 | 1 |
| elasticfilesystem:PutAccountPreferences | Write | 6 | 1 |
| elasticfilesystem:PutBackupPolicy | Write | 6 | 1 |
| elasticfilesystem:PutFileSystemPolicy | Permissions management | 6 | 1 |
| elasticfilesystem:PutLifecycleConfiguration | Write | 6 | 1 |
| elasticfilesystem:ReplicationRead | Read | 8 | 1 |
| elasticfilesystem:ReplicationWrite | Write | 7 | 1 |
| elasticfilesystem:Restore | Write | 6 | 2 |
| elasticfilesystem:TagResource | Tagging | 6 | 6 |
| elasticfilesystem:UntagResource | Tagging | 6 | 3 |
| elasticfilesystem:UpdateFileSystem | Write | 6 | 1 |
| elasticfilesystem:UpdateFileSystemProtection | Write | 6 | 1 |