Ravi Sir's Cards › AWS
NFS security group for EFS
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
Mount hangs forever when port 2049 is blocked between EC2 and mount targets.
What is it?
Allow inbound NFS (TCP 2049) on the EFS mount-target security group from the EC2 security group (not 0.0.0.0/0 in real apps).
TCP 2049
How to do it
EC2 SG egress OK; EFS SG inbound 2049 source = EC2 SG id in the same VPC.
Example
sudo mount -t efs -o tls fs-xxxx:/ /mnt/efs succeeds instead of timing out.