EACCES：AWS Lambda 上的權限被拒絕

Question

我已將文件路徑添加為/mnt/efs但仍然出現 Permission Denied 錯誤。

這是 CloudWatchlog：

2022-01-04T20:16:03.992Z    f4c79867-d245-4800-9a7d-a07ee8e52f14    INFO    🚀 ~ file: db.js ~ line 81 ~ setCredentials ~ error [Error: EACCES: permission denied, open '/mnt/efs/.db.json.tmp'] {
  errno: -13,
  code: 'EACCES',
  syscall: 'open',
  path: '/mnt/efs/.db.json.tmp'
}

Answer 1

您是否在 Lambda 附加的 IAM 角色中添加了 EFS 權限？ 檢查此鏈接以獲取您可以在 IAM 角色中添加的 EFS 權限https://docs.aws.amazon.com/efs/latest/ug/iam-access-control-nfs-efs.html

至於如何將 IAM 角色附加到 Lambda 檢查https://aws.amazon.com/blogs/security/how-to-create-an-aws-iam-policy-to-grant-aws-lambda-access-to- an-amazon-dynamodb-table/

和

https://docs.aws.amazon.com/lambda/latest/dg/lambda-intro-execution-role.html