---
title: "GET /2015-02-01/mount-targets/{MountTargetId}/security-groups"
method: GET
path: "/2015-02-01/mount-targets/{MountTargetId}/security-groups"
---

# GET /2015-02-01/mount-targets/{MountTargetId}/security-groups

`GET /2015-02-01/mount-targets/{MountTargetId}/security-groups`

Returns the security groups currently in effect for a mount target. This operation requires that the network interface of the mount target has been created and the lifecycle state of the mount target is not `deleted`.

This operation requires permissions for the following actions:

*   `elasticfilesystem:DescribeMountTargetSecurityGroups` action on the mount target's file system.
    
*   `ec2:DescribeNetworkInterfaceAttribute` action on the mount target's network interface.

## Path parameters

- `MountTargetId` string, required

## Response `200`

Success

- DescribeMountTargetSecurityGroupsResponse
  - `SecurityGroups` SecurityGroup[], required — An array of security groups.

## Other responses

- `480` — BadRequest
- `481` — InternalServerError
- `482` — MountTargetNotFound
- `483` — IncorrectMountTargetState

---

[API](https://skmtc.net/aws/apis/elasticfilesystem.md) · [All operations](https://skmtc.net/aws/apis/elasticfilesystem/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/elasticfilesystem/revisions/bd410c1b597a/schema)