Walkthrough: Mount a File System from a Different VPC

To determine the Availability Zone ID of the EC2 instance

1. Connect to your EC2 instance:

   • To connect to your instance from a computer running macOS or Linux, specify the .pem file for your SSH command. To do this, use the -i option and the path to your private key.

   • To connect to your instance from a computer running Windows, you can use either MindTerm or PuTTY. To use PuTTY, install it and convert the .pem file to a .ppk file.

   For more information, see the following topics in the Amazon EC2 User Guide:

   • Connect to your Linux instance from Linux or macOS using SSH

   • Connect to your Linux instance from Windows with PuTTY

2. Determine the Availability Zone ID that the EC2 instance is in using the describe-availability-zones CLI command as follows.

   [ec2-user@ip-10.0.0.1] $ aws ec2 describe-availability-zones --zone-name
   {
       "AvailabilityZones": [
           {
               "State": "available", 
               "ZoneName": "us-east-2b", 
               "Messages": [], 
               "ZoneId": "use2-az2", 
               "RegionName": "us-east-2"
           }
       ]
   }

   The Availability Zone ID is returned in the ZoneId property, use2-az2.

To determine the mount target IP address in the same Availability Zone ID

• Retrieve the mount target IP address for your file system in the use2-az2 AZ ID using the describe-mount-targets CLI command, as follows.

  $ aws efs describe-mount-targets --file-system-id file_system_id
  {
      "MountTargets": [
          {
              "OwnerId": "111122223333",
              "MountTargetId": "fsmt-11223344", 
    =====>    "AvailabilityZoneId": "use2-az2",
              "NetworkInterfaceId": "eni-048c09a306023eeec", 
              "AvailabilityZoneName": "us-east-2b", 
              "FileSystemId": "fs-01234567", 
              "LifeCycleState": "available", 
              "SubnetId": "subnet-06eb0da37ee82a64f", 
              "OwnerId": "958322738406", 
    =====>    "IpAddress": "10.0.2.153"
          }, 
  ...
          {
              "OwnerId": "111122223333",
              "MountTargetId": "fsmt-667788aa", 
              "AvailabilityZoneId": "use2-az3", 
              "NetworkInterfaceId": "eni-0edb579d21ed39261", 
              "AvailabilityZoneName": "us-east-2c", 
              "FileSystemId": "fs-01234567", 
              "LifeCycleState": "available", 
              "SubnetId": "subnet-0ee85556822c441af", 
              "OwnerId": "958322738406", 
              "IpAddress": "10.0.3.107"
          }
      ]
  }

  The mount target in the use2-az2 Availability Zone ID has an IP address of 10.0.2.153.

To add a host entry for the mount target

1. Add a line for the mount target IP address to the EC2 instance's /etc/hosts file. The entry uses the format mount-target-IP-Address file-system-ID.efs.region.amazonaws.com. Use the following command to add the line to the file.

   echo "10.0.2.153 fs-01234567.efs.cn-northwest-1.amazonaws.com.cn" | sudo tee -a /etc/hosts

2. Make sure that the VPC security groups for the EC2 instance and mount target have rules that allow access to the EFS system, as needed. For more information, see Using VPC security groups for Amazon EC2 instances and mount targets.

To create a mount directory

• Create a directory for mounting the file system using the following command.

  $ sudo mkdir /mnt/efs/

To mount the file system using IAM authorization

• Use the following command to mount the file system using IAM authorization.

  $ sudo mount -t efs -o tls,iam file-system-id /mnt/efs/

To mount the file system using an EFS access point

• Use the following command to mount the file system using an EFS access point.

  $ sudo mount -t efs -o tls,accesspoint=access-point-id file-system-id /mnt/efs/

To test the Amazon EFS file system connection

1. Change directories to the new directory that you created with the following command.

   $ cd ~/mnt/efs

2. Make a subdirectory and change the ownership of that subdirectory to your EC2 instance user. Then navigate to that new directory with the following commands.

   $ sudo mkdir getting-started
   $ sudo chown ec2-user getting-started
   $ cd getting-started

3. Create a text file with the following command.

   $ touch test-file.txt

4. List the directory contents with the following command.

   $ ls -al

To clean up resources and protect your Amazon Web Services account

1. Unmount the Amazon EFS file system with the following command.

   $ sudo umount ~/efs

2. Open the Amazon EFS console at https://console.amazonaws.cn/efs/.

3. Choose the Amazon EFS file system that you want to delete from the list of file systems.

4. For Actions, choose Delete file system.

5. In the Permanently delete file system dialog box, type the file system ID for the Amazon EFS file system that you want to delete, and then choose Delete File System.

6. Open the Amazon EC2 console at https://console.amazonaws.cn/ec2/.

7. In the navigation pane, choose Security Groups.

8. Select the name of the security group that you added the rule to for this walkthrough.

   Warning

   Don't delete the default security group for your VPC.

9. For Actions, choose Edit inbound rules.

10. Choose the X at the end of the inbound rule you added, and choose Save.