AWS Security ChangesHomeSearch

AWS code-library documentation change

Service: code-library · 2025-06-28 · Documentation low

File: code-library/latest/ug/efs_example_efs_CreateMountTarget_section.md

Summary

Added PowerShell V5 examples for creating EFS mount targets with security group specifications

Security assessment

The change adds examples showing how to specify security groups when creating mount targets, which is a security best practice for network access control. However, there's no evidence of addressing a specific security vulnerability.

Diff

diff --git a/code-library/latest/ug/efs_example_efs_CreateMountTarget_section.md b/code-library/latest/ug/efs_example_efs_CreateMountTarget_section.md
index 54c52ebd4..6819f16a2 100644
--- a//code-library/latest/ug/efs_example_efs_CreateMountTarget_section.md
+++ b//code-library/latest/ug/efs_example_efs_CreateMountTarget_section.md
@@ -90,0 +91,37 @@ PowerShell
+**Tools for PowerShell V5**
+    
+
+**Example 1: Creates a new mount target for a file system. The specified subnet will be used determine the Virtual Private Cloud (VPC) that the mount target will be created in and the IP address that will be auto-assigned (from the address range of the subnet). The assigned IP address can be used to then mount this file system on an Amazon EC2 instance. As no security groups were specified the network interface created for the target is associated with the default security group for the subnet's VPC.**
+    
+    
+    New-EFSMountTarget -FileSystemId fs-1a2b3c4d -SubnetId subnet-1a2b3c4d
+    
+
+**Output:**
+    
+    
+    FileSystemId       : fs-1a2b3c4d
+    IpAddress          : 10.0.0.131
+    LifeCycleState     : creating
+    MountTargetId      : fsmt-1a2b3c4d
+    NetworkInterfaceId : eni-1a2b3c4d
+    OwnerId            : 123456789012
+    SubnetId           : subnet-1a2b3c4d
+
+**Example 2: Creates a new mount target for the specified file system with auto-assigned IP address. The network interface created for the mount target is associated with the specified security groups (up to 5, in the format "sg-xxxxxxxx", may be specified).**
+    
+    
+    New-EFSMountTarget -FileSystemId fs-1a2b3c4d -SubnetId subnet-1a2b3c4d -SecurityGroup sg-group1,sg-group2,sg-group3
+    
+
+**Example 3: Creates a new mount target for the specified file system with the specified IP address.**
+    
+    
+    New-EFSMountTarget -FileSystemId fs-1a2b3c4d -SubnetId subnet-1a2b3c4d -IpAddress 10.0.0.131
+    
+
+  * For API details, see [CreateMountTarget](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. 
+
+
+
+