AWS efs medium security documentation change
Summary
Added explicit NFS port 2049 requirement in outbound rule documentation
Security assessment
Port-specific outbound rule guidance improves network security posture for EFS mounting
Diff
diff --git a/efs/latest/ug/mounting-fs-mount-helper-direct.md b/efs/latest/ug/mounting-fs-mount-helper-direct.md index af3cfe8e1..d944ff965 100644 --- a//efs/latest/ug/mounting-fs-mount-helper-direct.md +++ b//efs/latest/ug/mounting-fs-mount-helper-direct.md @@ -110 +110 @@ We recommend that you only use the **Anywhere** source for testing. You can crea -You don't need to add an outbound rule, because the default outbound rule allows all traffic to leave. If you don't have this default outbound rule, add an outbound rule to open a TCP connection on the NFS port, identifying the mount target security group as the destination. +You don't need to add an outbound rule, because the default outbound rule allows all traffic to leave. If you don't have this default outbound rule, add an outbound rule to open a TCP connection on NFS port 2049, identifying the mount target security group as the destination.