AWS efs documentation change
Summary
Restructured documentation for changing VPC configurations, removed IPv6 references, and added explicit guidance on security group management
Security assessment
Added focus on security groups in section headers and procedures, which are security features, but no specific vulnerability is addressed. The IPv6 removal mirrors the first file change without security justification.
Diff
diff --git a/efs/latest/ug/manage-fs-access-change-vpc.md b/efs/latest/ug/manage-fs-access-change-vpc.md index b99c3baec..67d17c53e 100644 --- a/efs/latest/ug/manage-fs-access-change-vpc.md +++ b/efs/latest/ug/manage-fs-access-change-vpc.md @@ -5 +5 @@ -Using the CLI +# Changing the mount target VPC @@ -7 +7 @@ Using the CLI -# Changing the VPC for your mount target +You can use an EFS file system in one VPC based on the Amazon VPC service at a time. That is, you create mount targets in a VPC for your file system, and use those mount targets to provide access to the file system. @@ -9,3 +9 @@ Using the CLI -You can use an Amazon EFS file system in one VPC based on the Amazon VPC service at a time. That is, you create mount targets in a VPC for your file system, and use those mount targets to provide access to the file system. - -You can mount the Amazon EFS file system from these targets: +You can mount the EFS file system from these targets: @@ -24,7 +22 @@ You can mount the Amazon EFS file system from these targets: -A _VPC peering connection_ is a networking connection between two VPCs that enables you to route traffic between them. The connection can use private Internet Protocol version 4 (IPv4) or Internet Protocol version 6 (IPv6) addresses. For more information on how Amazon EFS works with VPC peering, see [Mounting EFS file systems from another AWS account or VPC](./manage-fs-access-vpc-peering.html). - -To access the file system from EC2 instances in another VPC, you have to: - - * Delete the current mount targets. - - * Change the VPC. +A _VPC peering connection_ is a networking connection between two VPCs that enables you to route traffic between them. The connection can use private Internet Protocol version 4 (IPv4) addresses. For more information on how Amazon EFS works with VPC peering, see [Mounting EFS file systems from another AWS account or VPC](./manage-fs-access-vpc-peering.html). @@ -32 +24 @@ To access the file system from EC2 instances in another VPC, you have to: - * Create new mount targets. +###### To change the VPC for a file system @@ -33,0 +26 @@ To access the file system from EC2 instances in another VPC, you have to: +The following are the steps that you'll perform to change the VPC for an EFS file system's network configuration. @@ -34,0 +28 @@ To access the file system from EC2 instances in another VPC, you have to: + 1. Delete each mount target assigned to the file system. For instructions, see [Deleting mount targets](./mount-target-delete.html). @@ -35,0 +30 @@ To access the file system from EC2 instances in another VPC, you have to: + 2. When the **Mount targets status** for each mount target is **Deleted** , assign the new VPC and create new mount targets for the file system. For instructions, see [Creating mount targets](./manage-fs-access-create-delete-mount-targets.html). @@ -37 +31,0 @@ To access the file system from EC2 instances in another VPC, you have to: -For more information on performing these steps in the AWS Management Console, see [To change the VPC for an Amazon EFS file system (console)](./accessing-fs.html#change-vpc-console2). @@ -39 +32,0 @@ For more information on performing these steps in the AWS Management Console, se -## Using the CLI @@ -41 +33,0 @@ For more information on performing these steps in the AWS Management Console, se -To use a file system in another VPC, first delete any mount targets that you previously created in a VPC. Then create new mount targets in another VPC. For example AWS CLI commands, see [Manage mount targets (CLI)](./accessing-fs.html#create-mount-target-cli). @@ -49 +41 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Creating or deleting mount targets in a VPC +Deleting mount targets @@ -51 +43 @@ Creating or deleting mount targets in a VPC -Updating the mount target configuration +Changing mount target security groups