Service: Amazon Elastic File System
Short Name:
elasticfilesystem
ARN Format:
arn:aws:elasticfilesystem:${Region}:${Account}:${ResourceType}/${ResourcePath}
ARN Regex:
^arn:aws:elasticfilesystem:.+
ReadOnlyAccess
…
AWSConfigRoleAction | Access | Reference | Description |
---|---|---|---|
elasticfilesystem:DescribeAccessPoints | Docs | Grants permission to view the descriptions of Amazon EFS access points | |
elasticfilesystem:DescribeAccountPreferences | Docs | Grants permission to view the account preferences in effect for an account | |
elasticfilesystem:DescribeFileSystems | Docs | Grants permission to view the description of an Amazon EFS file system specified by file system CreationToken or FileSystemId; or to view the description of all file systems owned by the caller's AWS account in the AWS region of the endpoint that is being called | |
elasticfilesystem:DescribeReplicationConfigurations | Docs | Grants permission to view the description of an Amazon EFS replication configuration specified by FileSystemId; or to view the description of all replication configurations owned by the caller's AWS account in the AWS region of the endpoint that is being called | |
elasticfilesystem:DeleteFileSystemPolicy | Docs | Grants permission to delete the resource-level policy for a file system | |
elasticfilesystem:PutFileSystemPolicy | Docs | Grants permission to apply a resource-level policy that defines the actions allowed or denied from given actors for the specified file system | |
elasticfilesystem:ClientMount | Docs | Grants permission to allow an NFS client read-access to a file system | |
elasticfilesystem:DescribeBackupPolicy | Docs | Grants permission to view the BackupPolicy object for an Amazon EFS file system | |
elasticfilesystem:DescribeFileSystemPolicy | Docs | Grants permission to view the resource-level policy for an Amazon EFS file system | |
elasticfilesystem:DescribeLifecycleConfiguration | Docs | Grants permission to view the LifecycleConfiguration object for an Amazon EFS file system | |
elasticfilesystem:DescribeMountTargets | Docs | Grants permission to view the descriptions of all mount targets, or a specific mount target, for a file system | |
elasticfilesystem:DescribeMountTargetSecurityGroups | Docs | Grants permission to view the security groups in effect for a mount target | |
elasticfilesystem:DescribeTags | Docs | Grants permission to view the tags associated with a file system | |
elasticfilesystem:ListTagsForResource | Docs | Grants permission to view the tags associated with the specified Amazon EFS resource | |
elasticfilesystem:CreateTags | Docs | Grants permission to create or overwrite tags associated with a file system; deprecated, see TagResource | |
elasticfilesystem:DeleteTags | Docs | Grants permission to delete the specified tags from a file system; deprecated, see UntagResource | |
elasticfilesystem:TagResource | Docs | Grants permission to create or overwrite tags associated with the specified Amazon EFS resource | |
elasticfilesystem:UntagResource | Docs | Grants permission to delete the specified tags from an Amazon EFS resource | |
elasticfilesystem:Backup | Docs | Grants permission to start a backup job for an existing file system | |
elasticfilesystem:ClientRootAccess | Docs | Grants permission to allow an NFS client root-access to a file system | |
elasticfilesystem:ClientWrite | Docs | Grants permission to allow an NFS client write-access to a file system | |
elasticfilesystem:CreateAccessPoint | Docs | Grants permission to create an access point for the specified file system | |
elasticfilesystem:CreateFileSystem | Docs | Grants permission to create a new, empty file system | |
elasticfilesystem:CreateMountTarget | Docs | Grants permission to create a mount target for a file system | |
elasticfilesystem:CreateReplicationConfiguration | Docs | Grants permission to create a new replication configuration | |
elasticfilesystem:DeleteAccessPoint | Docs | Grants permission to delete the specified access point | |
elasticfilesystem:DeleteFileSystem | Docs | Grants permission to delete a file system, permanently severing access to its contents | |
elasticfilesystem:DeleteMountTarget | Docs | Grants permission to delete the specified mount target | |
elasticfilesystem:DeleteReplicationConfiguration | Docs | Grants permission to delete a replication configuration | |
elasticfilesystem:ModifyMountTargetSecurityGroups | Docs | Grants permission to modify the set of security groups in effect for a mount target | |
elasticfilesystem:PutAccountPreferences | Docs | Grants permission to set the account preferences of an account | |
elasticfilesystem:PutBackupPolicy | Docs | Grants permission to enable or disable automatic backups with AWS Backup by creating a new BackupPolicy object | |
elasticfilesystem:PutLifecycleConfiguration | Docs | Grants permission to enable lifecycle management by creating a new LifecycleConfiguration object | |
elasticfilesystem:Restore | Docs | Grants permission to start a restore job for a backup of a file system | |
elasticfilesystem:UpdateFileSystem | Docs | Grants permission to update the throughput mode or the amount of provisioned throughput of an existing file system | |
elasticfilesystem:UpdateFileSystemProtection | Docs | Grants permission to update the file system protection of an existing file system |
aws:RequestTag/${TagKey}
aws:ResourceTag/${TagKey}
aws:TagKeys
elasticfilesystem:AccessPointArn
elasticfilesystem:AccessedViaMountTarget
elasticfilesystem:CreateAction
elasticfilesystem:Encrypted