EFSWithMountTarget.yml

AWSTemplateFormatVersion: '2010-09-09'
Description: Creates an EFS file system with mount targets
Parameters:
  VpcId:
    Type: AWS::EC2::VPC::Id
    Description: VPC in which to create stack
  SubnetIdA:
    Type: AWS::EC2::Subnet::Id
    Description: Subnet in which to create mount target (must be in distinct AZ from other subnets supplied)
  SubnetIdB:
    Type: AWS::EC2::Subnet::Id
    Description: Subnet in which to create mount target (must be in distinct AZ from other subnets supplied)
  SubnetIdC:
    Type: AWS::EC2::Subnet::Id
    Description: Subnet in which to create mount target (must be in distinct AZ from other subnets supplied)
    
Resources:
  FileSystem:
    Type: AWS::EFS::FileSystem
    Properties:
      FileSystemTags:
      - Key: Name
        Value: !Ref 'AWS::StackName'
  MountTargetSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      VpcId: !Ref 'VpcId'
      GroupDescription: Security group for mount target
      SecurityGroupIngress:
      - IpProtocol: tcp
        FromPort: '2049'
        ToPort: '2049'
        SourceSecurityGroupId: !Ref 'FileSystemAccessSecurityGroup'
  FileSystemAccessSecurityGroup:
    Type: AWS::EC2::SecurityGroup
    Properties:
      VpcId: !Ref 'VpcId'
      GroupDescription: Security group for EFS access
  MountTargetA:
    Type: AWS::EFS::MountTarget
    Properties:
      FileSystemId: !Ref 'FileSystem'
      SubnetId: !Ref 'SubnetIdA'
      SecurityGroups:
      - !Ref 'MountTargetSecurityGroup'
  MountTargetB:
    Type: AWS::EFS::MountTarget
    Properties:
      FileSystemId: !Ref 'FileSystem'
      SubnetId: !Ref 'SubnetIdB'
      SecurityGroups:
      - !Ref 'MountTargetSecurityGroup'
  MountTargetC:
      Type: AWS::EFS::MountTarget
      Properties:
        FileSystemId: !Ref 'FileSystem'
        SubnetId: !Ref 'SubnetIdC'
        SecurityGroups:
        - !Ref 'MountTargetSecurityGroup'
Outputs:
  VpcId:
    Description: VPC ID
    Value: !Ref 'VpcId'
    Export:
      Name: !Sub '${AWS::StackName}-VpcId'
  FileSystemId:
    Description: ID of the filesystem created
    Value: !Ref 'FileSystem'
    Export:
      Name: !Sub '${AWS::StackName}-FileSystemId'
  FSAccessSecurityGroup:
    Description: The ID of the Security group which is allowed to access the file
      system
    Value: !GetAtt [FileSystemAccessSecurityGroup, GroupId]
    Export:
      Name: !Sub '${AWS::StackName}-FSAccessSecurityGroupID'
  SubnetIdA:
    Description: Subnet in which mount target A was created
    Value: !Ref 'SubnetIdA'
    Export:
      Name: !Sub '${AWS::StackName}-SubnetIdA'  
  SubnetIdB:
    Description: Subnet in which mount target B was created
    Value: !Ref 'SubnetIdB'
    Export:
      Name: !Sub '${AWS::StackName}-SubnetIdB'  
  SubnetIdC:
    Description: Subnet in which mount target C was created
    Value: !Ref 'SubnetIdC'
    Export:
      Name: !Sub '${AWS::StackName}-SubnetIdC'