Configuring Amazon Systems Manager to install the EFS client
There are two one-time configurations required to set up Systems Manager to automatically install or update the amazon-efs-utils package.
Configure an Amazon Identity and Access Management (IAM) instance profile with the required permissions.
Configure an Association (including the schedule) used for installation or updates by the State Manager
Step 1: Configure an IAM instance profile with the required permissions
By default, Amazon Systems Manager doesn't have permission to manage your Amazon EFS clients and install or update the amazon-efs-utils package. You must grant access to Systems Manager by using an Amazon Identity and Access Management (IAM) instance profile. An instance profile is a container that passes IAM role information to an Amazon EC2 instance at launch.
Use the AmazonElasticFileSystemsUtils
Amazon managed permission policy
to assign the appropriate permissions to roles. You can create a new role
for your instance profile or add the AmazonElasticFileSystemsUtils
permission policy to an existing role. You must then use this instance profile to launch
your Amazon EC2 instances. For more information, see
Configure instance permissions required for Systems Manager.
Step 2: Configure an association used by State Manager
The amazon-efs-utils
package is included with Distributor and is ready for you to deploy to
managed EC2 instances. To view the latest version of amazon-efs-utils
that is
available for installation, you can use the Amazon Systems Manager console or your preferred Amazon
command line tool. To access Distributor, open the https://console.amazonaws.cn/systems-manager/
Using State Manager, you can install or update the amazon-efs-utils
package on your managed
EC2 instances immediately or on a schedule. Additionally, you can ensure that amazon-efs-utils
is automatically installed on new EC2 instances. For more information about installation or updating
packages using Distributor and State Manager, see
Working with Distributor.
To automatically install or update the amazon-efs-utils package on instances using the Systems Manager console, see Scheduling a package installation or update (console). This will prompt you to create an association for State Manager, which defines the state you want to apply to a set of instances. Use the following inputs when you create your association:
For Parameters choose Action > Install and Installation Type > In-place update.
For Targets the recommended setting is Choose all instances to register all new and existing EC2 instances as targets to automatically install or update AmazonEFSUtils. Alternatively, you can specify instance tags, select instances manually, or choose a resource group to apply the association to a subset of instances. If you specify instance tags, you must launch your EC2 instances with the tags to allows Amazon Systems Manager to automatically install or update the Amazon EFS client.
For Specify schedule the recommended setting for AmazonEFSUtils is every 30 days. You can use controls to create a cron or rate schedule for the association.
To use Amazon Systems Manager to mount Amazon EFS file systems to multiple EC2 instances, see Mounting EFS to multiple EC2 instances .