# AuthorizationConfig

The authorization configuration details for the Amazon EFS file system.

- Source: [`aws-ecs/lib/base/task-definition.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-ecs/lib/base/task-definition.ts#L1284)

## Example

```ts
// The code below shows an example of how to instantiate this type.
// The values are placeholders you should change.
import { aws_ecs as ecs } from 'aws-cdk-lib';
const authorizationConfig: ecs.AuthorizationConfig = {
  accessPointId: 'accessPointId',
  iam: 'iam',
};
```

## Properties

- `accessPointId`: string — The access point ID to use.

  **Default:** No id

  If an access point is specified, the root directory value will be
  relative to the directory set for the access point.
  If specified, transit encryption must be enabled in the EFSVolumeConfiguration.

- `iam`: string — Whether or not to use the Amazon ECS task IAM role defined in a task definition when mounting the Amazon EFS file system.

  **Default:** If this parameter is omitted, the default value of DISABLED is used.

  If enabled, transit encryption must be enabled in the EFSVolumeConfiguration.

  Valid values: ENABLED | DISABLED