---
title: "POST /2015-02-01/access-points"
method: POST
path: "/2015-02-01/access-points"
---

# POST /2015-02-01/access-points

`POST /2015-02-01/access-points`

Creates an EFS access point. An access point is an application-specific view into an EFS file system that applies an operating system user and group, and a file system path, to any file system request made through the access point. The operating system user and group override any identity information provided by the NFS client. The file system path is exposed as the access point's root directory. Applications using the access point can only access data in the application's own directory and any subdirectories. To learn more, see [Mounting a file system using EFS access points](https://docs.aws.amazon.com/efs/latest/ug/efs-access-points.html).

If multiple requests to create access points on the same file system are sent in quick succession, and the file system is near the limit of 1000 access points, you may experience a throttling response for these requests. This is to ensure that the file system does not exceed the stated access point limit.

This operation requires permissions for the `elasticfilesystem:CreateAccessPoint` action.

## Request body

- object
  - `ClientToken` string, required — A string of up to 64 ASCII characters that Amazon EFS uses to ensure idempotent creation.
  - `Tags` Tag[] — Creates tags associated with the access point. Each tag is a key-value pair, each key must be unique. For more information, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html">Tagging Amazon Web Services resources</a> in the <i>Amazon Web Services General Reference Guide</i>.
    - `Key` string, required — The tag key (String). The key can't start with <code>aws:</code>.
    - `Value` string, required — The value of the tag key.
  - `FileSystemId` string, required — The ID of the EFS file system that the access point provides access to.
  - `PosixUser` object — The full POSIX identity, including the user ID, group ID, and any secondary group IDs, on the access point that is used for all file system operations performed by NFS clients using the access point.
    - `Uid` integer — The POSIX user ID used for all file system operations using this access point.
    - `Gid` integer — The POSIX group ID used for all file system operations using this access point.
    - `SecondaryGids` Gid[] — Secondary POSIX group IDs used for all file system operations using this access point.
  - `RootDirectory` object — Specifies the directory on the Amazon EFS file system that the access point provides access to. The access point exposes the specified file system path as the root directory of your file system to applications using the access point. NFS clients using the access point can only access data in the access point's <code>RootDirectory</code> and it's subdirectories.
    - `Path` string — Specifies the path on the EFS file system to expose as the root directory to NFS clients using the access point to access the EFS file system. A path can have up to four subdirectories. If the specified path does not exist, you are required to provide the <code>CreationInfo</code>.
    - `CreationInfo` object — <p>(Optional) Specifies the POSIX IDs and permissions to apply to the access point's <code>RootDirectory</code>. If the <code>RootDirectory</code> &gt; <code>Path</code> specified does not exist, EFS creates the root directory using the <code>CreationInfo</code> settings when a client connects to an access point. When specifying the <code>CreationInfo</code>, you must provide values for all properties. </p> <important> <p>If you do not provide <code>CreationInfo</code> and the specified <code>RootDirectory</code> &gt; <code>Path</code> does not exist, attempts to mount the file system using the access point will fail.</p> </important>
      - `OwnerUid` integer, required — Specifies the POSIX user ID to apply to the <code>RootDirectory</code>. Accepts values from 0 to 2^32 (4294967295).
      - `OwnerGid` integer, required — Specifies the POSIX group ID to apply to the <code>RootDirectory</code>. Accepts values from 0 to 2^32 (4294967295).
      - `Permissions` string, required — Specifies the POSIX permissions to apply to the <code>RootDirectory</code>, in the format of an octal number representing the file's mode bits.

## Response `200`

Success

- AccessPointDescription — Provides a description of an EFS file system access point.
  - `ClientToken` string — The opaque string specified in the request to ensure idempotent creation.
  - `Name` string — The name of the access point. This is the value of the <code>Name</code> tag.
  - `Tags` Tag[] — The tags associated with the access point, presented as an array of Tag objects.
    - `Key` string, required — The tag key (String). The key can't start with <code>aws:</code>.
    - `Value` string, required — The value of the tag key.
  - `AccessPointId` string — The ID of the access point, assigned by Amazon EFS.
  - `AccessPointArn` string — The unique Amazon Resource Name (ARN) associated with the access point.
  - `FileSystemId` string — The ID of the EFS file system that the access point applies to.
  - `PosixUser` object — The full POSIX identity, including the user ID, group ID, and secondary group IDs on the access point that is used for all file operations by NFS clients using the access point.
    - `Uid` integer, required — The POSIX user ID used for all file system operations using this access point.
    - `Gid` integer, required — The POSIX group ID used for all file system operations using this access point.
    - `SecondaryGids` Gid[] — Secondary POSIX group IDs used for all file system operations using this access point.
  - `RootDirectory` object — The directory on the Amazon EFS file system that the access point exposes as the root directory to NFS clients using the access point.
    - `Path` string — Specifies the path on the EFS file system to expose as the root directory to NFS clients using the access point to access the EFS file system. A path can have up to four subdirectories. If the specified path does not exist, you are required to provide the <code>CreationInfo</code>.
    - `CreationInfo` object — <p>(Optional) Specifies the POSIX IDs and permissions to apply to the access point's <code>RootDirectory</code>. If the <code>RootDirectory</code> &gt; <code>Path</code> specified does not exist, EFS creates the root directory using the <code>CreationInfo</code> settings when a client connects to an access point. When specifying the <code>CreationInfo</code>, you must provide values for all properties. </p> <important> <p>If you do not provide <code>CreationInfo</code> and the specified <code>RootDirectory</code> &gt; <code>Path</code> does not exist, attempts to mount the file system using the access point will fail.</p> </important>
      - `OwnerUid` integer, required — Specifies the POSIX user ID to apply to the <code>RootDirectory</code>. Accepts values from 0 to 2^32 (4294967295).
      - `OwnerGid` integer, required — Specifies the POSIX group ID to apply to the <code>RootDirectory</code>. Accepts values from 0 to 2^32 (4294967295).
      - `Permissions` string, required — Specifies the POSIX permissions to apply to the <code>RootDirectory</code>, in the format of an octal number representing the file's mode bits.
  - `OwnerId` string — Identifies the Amazon Web Services account that owns the access point resource.
  - `LifeCycleState` 'creating' | 'available' | 'updating' | 'deleting' | 'deleted' | 'error' — Identifies the lifecycle phase of the access point.

## Other responses

- `480` — BadRequest
- `481` — AccessPointAlreadyExists
- `482` — IncorrectFileSystemLifeCycleState
- `483` — InternalServerError
- `484` — FileSystemNotFound
- `485` — AccessPointLimitExceeded
- `486` — ThrottlingException

---

[API](https://skmtc.net/aws/apis/elasticfilesystem.md) · [All operations](https://skmtc.net/aws/apis/elasticfilesystem/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/elasticfilesystem/revisions/bd410c1b597a/schema)
