确保您的EFS文件系统在同一VPC中,并且与您的ECS任务的子网和安全组相匹配。
在您的任务定义中,将EFS文件系统作为卷添加到容器中。以下是一个示例:
{
"family": "example-task",
"taskRoleArn": "arn:aws:iam::012345678910:role/ecsTaskExecutionRole",
"executionRoleArn": "arn:aws:iam::012345678910:role/ecsTaskExecutionRole",
"networkMode": "awsvpc",
"containerDefinitions": [{
"name": "example-container",
"image": "nginx:latest",
"mountPoints": [{
"sourceVolume": "efs",
"containerPath": "/mnt/efs"
}]
}],
"volumes": [{
"name": "efs",
"efsVolumeConfiguration": {
"fileSystemId": "fs-01234567",
"transitEncryption": "ENABLED",
"authorizationConfig": {
"accessPointId": "fsap-01234567"
}
}
}]
}
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "EFSPermissions",
"Action": [
"elasticfilesystem:ClientMount",
"elasticfilesystem:ClientWrite"
],
"Effect": "Allow",
"Resource": [
"arn:aws:elasticfilesystem:us-west-2:012345678910:file-system/fs-01234567",
"arn:aws:elasticfilesystem:us-west-2:012345678910:access-point/fsap-01234567"
]