AWS efs medium security documentation change
Summary
Added explicit NFS port 2049 requirement in security group rule documentation
Security assessment
Specifying port 2049 enforces least-privilege network access for NFS mounting, reducing potential attack surface
Diff
diff --git a/efs/latest/ug/mounting-fs-mount-cmd-dns-name.md b/efs/latest/ug/mounting-fs-mount-cmd-dns-name.md index 002c4f9f4..100cffa08 100644 --- a//efs/latest/ug/mounting-fs-mount-cmd-dns-name.md +++ b//efs/latest/ug/mounting-fs-mount-cmd-dns-name.md @@ -9 +9 @@ -Prior to mounting your file system, you need to add a rule to the mount target security group that allows inbound NFS access from the EC2 security group. For more information, see [Using VPC security groups](./network-access.html). +Prior to mounting your file system, you need to add a rule to the mount target security group that allows inbound NFS access on port 2049 from the EC2 security group. For more information, see [Using VPC security groups](./network-access.html).