Configuring Amazon DataSync transfers with Amazon EFS

Open the Amazon DataSync console at https://console.amazonaws.cn/datasync/.

In the left navigation pane, expand Data transfer, then choose Locations and Create location.

For Location type, choose Amazon EFS file system.

You configure this location as a source or destination later.

For File system, choose the Amazon EFS file system that you want to use as a location.

For Mount path, enter a mount path for your Amazon EFS file system.

This specifies where DataSync reads or writes data (depending on if this is a source or destination location) on your file system.

By default, DataSync uses the root directory (or access point if you provide one for the EFS access point setting). You can also specify subdirectories using forward slashes (for example, /path/to/directory).

For Subnet choose a subnet where you want DataSync to create the network interfaces for managing your data transfer traffic.

The subnet must be located:

For Security groups, choose the security group associated with your Amazon EFS file system's mount target. You can choose more than one security group.

For In-transit encryption, choose whether you want DataSync to use Transport Layer Security (TLS) encryption when it transfers data to or from your file system.

(Optional) For EFS access point, choose an access point that DataSync can use to mount your file system.

For more information, see Accessing restricted file systems.

(Optional) For IAM role, specify a role that allows DataSync to access your file system.

For information on creating this role, see Creating a DataSync IAM role for file system access.

(Optional) Select Add tag to tag your file system.

A tag is a key-value pair that helps you manage, filter, and search for your locations.

Choose Create location.

Copy the following create-location-efs command:

aws datasync create-location-efs \
    --efs-filesystem-arn 'arn:aws-cn:elasticfilesystem:region:account-id:file-system/file-system-id' \
    --subdirectory /path/to/your/subdirectory \
    --ec2-config SecurityGroupArns='arn:aws-cn:ec2:region:account-id:security-group/security-group-id',SubnetArn='arn:aws-cn:ec2:region:account-id:subnet/subnet-id' \
    --in-transit-encryption TLS1_2 \
    --access-point-arn 'arn:aws-cn:elasticfilesystem:region:account-id:access-point/access-point-id' \
    --file-system-access-role-arn 'arn:aws-cn:iam::account-id:role/datasync-efs-access-role

For --efs-filesystem-arn, specify the Amazon Resource Name (ARN) of the Amazon EFS file system that you're transferring to or from.

For --subdirectory, specify a mount path for your file system.

This is where DataSync reads or writes data (depending on if this is a source or destination location) on your file system.

By default, DataSync uses the root directory (or access point if you provide one with --access-point-arn). You can also specify subdirectories using forward slashes (for example, /path/to/directory).

For --ec2-config, do the following:

For --in-transit-encryption, specify whether you want DataSync to use Transport Layer Security (TLS) encryption when it transfers data to or from your file system.

(Optional) For --access-point-arn, specify the ARN of an access point that DataSync can use to mount your file system.

For more information, see Accessing restricted file systems.

(Optional) For --file-system-access-role-arn, specify the ARN of an IAM role that allows DataSync to access your file system.

For information on creating this role, see Creating a DataSync IAM role for file system access.

Run the create-location-efs command.

If the command is successful, you get a response that shows you the ARN of the location that you created. For example:

{
    "LocationArn": "arn:aws-cn:datasync:us-east-1:111222333444:location/loc-0b3017fc4ba4a2d8d"
}