View a markdown version of this page

efs-access-point-enforce-user-identity - Amazon Config
Amazon CloudFormation template
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

efs-access-point-enforce-user-identity

Checks if Amazon Elastic File System (Amazon EFS) access points are configured to enforce a user identity. The rule is NON_COMPLIANT if 'PosixUser' is not defined or if parameters are provided and there is no match in the corresponding parameter.

Identifier: EFS_ACCESS_POINT_ENFORCE_USER_IDENTITY

Resource Types: AWS::EFS::AccessPoint

Trigger type: Configuration changes

Amazon Web Services Region: All supported Amazon regions except Asia Pacific (Malaysia), Israel (Tel Aviv), Asia Pacific (Taipei), China (Ningxia) Region

Parameters:

approvedUids (Optional)
Type: CSV

Comma-separated list of POSIX user ID that are approved for EFS access point user enforcement.

approvedGids (Optional)
Type: CSV

Comma-separated list of POSIX group IDs that are approved for EFS access point user enforcement.

Amazon CloudFormation template

To create Amazon Config managed rules with Amazon CloudFormation templates, see Creating Amazon Config Managed Rules With Amazon CloudFormation Templates.