Table Of Contents


User Guide

First time using the AWS CLI? See the User Guide for help getting started.

[ aws . efs ]



Modifies the set of security groups in effect for a mount target.

When you create a mount target, Amazon EFS also creates a new network interface. For more information, see create-mount-target . This operation replaces the security groups in effect for the network interface associated with a mount target, with the security-groups provided in the request. This operation requires that the network interface of the mount target has been created and the lifecycle state of the mount target is not deleted .

The operation requires permissions for the following actions:

  • elasticfilesystem:ModifyMountTargetSecurityGroups action on the mount target's file system.
  • ec2:ModifyNetworkInterfaceAttribute action on the mount target's network interface.

See also: AWS API Documentation

See 'aws help' for descriptions of global parameters.


--mount-target-id <value>
[--security-groups <value>]
[--cli-input-json <value>]
[--generate-cli-skeleton <value>]


--mount-target-id (string)

ID of the mount target whose security groups you want to modify.

--security-groups (list)

Array of up to five VPC security group IDs.


"string" "string" ...

--cli-input-json (string) Performs service operation based on the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton. If other arguments are provided on the command line, the CLI values will override the JSON-provided values.

--generate-cli-skeleton (string) Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input, prints a sample input JSON that can be used as an argument for --cli-input-json. If provided with the value output, it validates the command inputs and returns a sample output JSON for that command.

See 'aws help' for descriptions of global parameters.