troubleshooting-efs

Diagnoses Amazon EFS mount failures, NFS timeouts, permission issues, poor throughput, DNS/VPC misconfiguration, encryption/KMS problems via AWS APIs and symptom-based branching without destructive actions.

Updated May 12, 2026
One-click install
npx skills add https://github.com/mreferre/aws-agent-toolkit-skills --skill troubleshooting-efs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: troubleshooting-efs
Source: https://github.com/mreferre/aws-agent-toolkit-skills/tree/main/.kiro/skills/troubleshooting-efs
Command: npx skills add https://github.com/mreferre/aws-agent-toolkit-skills --skill troubleshooting-efs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Amazon EFS deployments often fail or degrade due to mount failures, NFS connectivity timeouts, IAM/permission denials, encryption/KMS misconfiguration, DNS/VPC settings, or throughput/burst-credit exhaustion.

Core Features & Use Cases

  • Mount and connectivity diagnosis: Classifies symptoms into missing NFS client, network/security group issues, VPC DNS problems, or general connectivity failures, then guides targeted checks.
  • Authorization and POSIX permissions troubleshooting: Separates IAM/file system policy enforcement from POSIX permission denials, including advice on access points for consistent UID/GID behavior.
  • Performance and encryption remediation guidance: Investigates throughput mode and BurstCreditBalance issues, and points to KMS/service-linked role causes for encrypted FS NFS errors.

Quick Start

Use the troubleshooting-efs skill to diagnose why my EFS file system is failing to mount and suggest the next AWS CLI and configuration checks based on the error text and symptoms.

Frequently Asked Questions about troubleshooting-efs

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
Why does my Amazon EFS mount fail with an NFS timeout error?

EFS mount failures with NFS timeouts usually stem from missing NFS clients, VPC DNS misconfiguration, or network security group issues. The skill diagnoses these symptoms and guides targeted AWS CLI checks to verify connectivity and resolve the underlying network or configuration block.

How do I troubleshoot access denied errors when mounting an EFS file system?

Access denied errors on EFS are caused by either IAM and file system policy enforcement or POSIX permission denials. The skill separates these authorization layers, checks access points for consistent UID/GID behavior, and identifies whether IAM or POSIX rules are blocking the mount.

What is causing poor throughput and performance degradation on my EFS file system?

Poor EFS throughput is often tied to the file system's throughput mode and BurstCreditBalance exhaustion. The skill investigates these performance metrics using AWS APIs to pinpoint credit depletion or configuration limits causing the degradation across networked instances.

Can I use this skill to diagnose EFS encryption and KMS misconfiguration issues?

Yes, the skill diagnoses encrypted EFS NFS errors by pointing to KMS and service-linked role causes. It safely guides dependency checks for encryption problems without destructive actions, verifying KMS encryption settings and IAM permissions required to access the encrypted file system.

How do I verify VPC DNS and network security group settings for EFS connectivity?

The skill classifies EFS connectivity symptoms into VPC DNS problems, security group issues, or general network failures. It then guides targeted configuration verification using AWS APIs and instance-level checks to ensure VPC settings allow reliable NFS mounts.

What is the best way to run symptom-based checks for EFS mount failures without destructive actions?

The best way is to use symptom-based branching with AWS APIs and instance-level configuration verification. The skill safely guides dependency checks to diagnose EFS mount failures, ensuring all troubleshooting steps are non-destructive and targeted to the specific error text.