Amazon Elastic File System (Amazon EFS) provides a simple, serverless, set-and-forget elastic file system for use with AWS Cloud services and on-premises resources. It is built to scale on demand to petabytes without disrupting applications, growing and shrinking automatically as you add and remove files, eliminating the need to provision and manage capacity to accommodate growth.

Organizations face significant challenges when modernizing or moving their applications to the cloud when they require a shared persistent file system interface. In this EFS course, you learn to secure Amazon EFS. Security starts with security controls and the shared responsibility model. Next, you’ll learn about IAM and Account level permissions and network security and encryption controls. In addition, this course covers how to create access points and auditing with AWS CloudTrail.

• Course level: Advanced
• Duration: 55 minutes

Activities

This course includes interactive lessons, demonstrations, and knowledge check questions.

Course objectives

In this course, you will learn to:

• Identify the how to control access to Amazon EFS files systems.
• Create the IAM policies necessary for application, end-user, and administrator level access to Amazon EFS file systems.
• Differentiate between IAM permissions and ACLs/POSIX permissions.

Intended audience

This course is intended for:

• Cloud Architects
• Storage Administrators
• Application Developers
• Data Scientists

Prerequisites

We recommend that attendees of this course have:

• Amazon EFS Primer
• General AWS knowledge (Cloud Practitioner Essentials)
• Knowledge of Amazon EC2 and virtualization

Course outline

Course Overview

Section 1: Amazon EFS Security Design

• Lesson 1 Introduction to Security Design
• Lesson 2: AWS Shared Responsibility Model
• Lesson 3: Security Design Principles
  

Section 2: Configuring Security for Amazon EFS

• Lesson 1: Introduction Deploying a Solution
• Lesson 2: Amazon EFS File System Setup
• Lesson 3: Attach an Amazon EFS File System

Knowledge Check

Resources and Feedback