EFS access points should enforce a root directory
Verifies that EFS access points enforce a non-root directory path, preventing clients from accessing the entire file system root.
- service
- EFS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
For instructions on how to enforce a root directory for an Amazon EFS access point, see Enforcing a root directory with an access point in the Amazon Elastic File System User Guide.
- Go to the Amazon EFS console.
- Create or modify an access point.
- Specify a root directory other than /.
See which of your accounts this check is failing on.
Book a demo