To improve account security, EFS now requires permission validation for operations related to permission groups through Identity and Access Management (IAM).

Change Time

11:40:00 on June 3, 2026, Beijing Time.

Change Description

EFS now requires permission validation for operations related to permission groups. The system-managed policy, EFSPermissionGroupAccess, has been introduced to manage read and write permissions for the EFS permission groups module.

Impacts

After the change takes effect, trying to use permission groups in the console or via API may result in an "Insufficient Permissions" error. The operation will also fail. To continue using this feature, attach the system-managed EFSPermissionGroupAccess policy to the appropriate IAM identity (user, user group, or role).

This change will not cause any loss of permissions for IAM identities that have already been granted higher-level permissions, such as EFSFullAccess, and no additional action is required.

If you have any questions about this change, please contact your account manager.

Last updated: 2026.06.05 16:12:00

Public security network record in Beijing: No. 11010802032137