无法从 ECS Fargate 任务访问 EFS

use*_*267 6 amazon-ecs amazon-efs aws-fargate

尝试启动使用 EFS 卷的 Fargate 任务。

从 ECS 控制台启动任务时,我收到此错误:

ResourceInitializationError: failed to invoke EFS utils commands to set up EFS volumes: stderr: Failed to resolve "fs-019a4b2d1774c5586.efs.eu-west-1.amazonaws.com" - check that your file system ID is correct, and ensure that the VPC has an EFS mount target for this file system ID. See https://docs.aws.amazon.com/console/efs/mount-dns-name for more detail. Attempting to lookup mount target ip address using botocore. Failed to import necessary dependency botocore, please install botocore first. : unsuccessful EFS utils command execution; code: 1
Run Code Online (Sandbox Code Playgroud)

文件系统 ID 正确。我已经从同一 VPC 中的 ec2 实例安装了该卷,一切都很好。

此处定义的以下步骤:https://aws.amazon.com/premiumsupport/knowledge-center/ecs-fargate-mount-efs-containers-tasks/ ?nc1=h_ls

我无法弄清楚在哪里指定 ECS 服务或任务的出站规则。看图片

提前致谢。

use*_*267 4

正如 @MarkB 所说,我已经编辑了出站规则并将端口 2049 (NFS) 添加到 EFS 安全组,并且工作正常。