IAM / storage / elasticfilesystem

AWS Elastic File System (IAM)

JSON →
AWSelasticfilesystemstorage

A scalable, elastic, cloud-native NFS file system for use with AWS Cloud services and on-premises resources.

iamaws
docs ↗
Permissions
Actions in this service
elasticfilesystem:DescribeFileSystems
elasticfilesystem:DescribeMountTargets
elasticfilesystem:DescribeAccessPoints
elasticfilesystem:DescribeBackupPolicy
elasticfilesystem:DescribeLifecycleConfiguration
elasticfilesystem:ListTagsForResource
elasticfilesystem:DescribeTags
Policy
Minimal privilege example

Copy-paste least-privilege policy statement — not yet harness-verified.

{ "Version": "2012-10-17", "Statement": [ { "Effect": "Allow", "Action": [ "elasticfilesystem:DescribeFileSystems", "elasticfilesystem:DescribeMountTargets", "elasticfilesystem:DescribeAccessPoints", "elasticfilesystem:DescribeBackupPolicy", "elasticfilesystem:DescribeLifecycleConfiguration", "elasticfilesystem:ListTagsForResource", "elasticfilesystem:DescribeTags" ], "Resource": "*" } ] }
SDK mapping
Method → permission

SDK method mapping (e.g. boto3.get_object() → s3:GetObject) is not yet collected.

Footguns
Known gotchas
Avoid elasticfilesystem:* — grants full control including creating, modifying, and deleting file systems and data.
Avoid elasticfilesystem:DeleteFileSystem — allows deletion of file systems, causing permanent data loss.
Resources
docshttps://servicereference.us-east-1.amazonaws.com/v1/elasticfilesystem/elasticfilesystem.json ↗