Set by controls 2

Active controls fix these values.

• encryptedbool, set to trueIf true, the disk will be encrypted
• kms_key_arnstring, set to nullThe ARN for the KMS encryption key. When specifying kms_key_arn, encrypted needs to be set to true

Optional 31

• access_pointsmap({...}), default {}A map of access point definitions to create
• attach_policybool, default trueDetermines whether a policy is attached to the file system
• availability_zone_namestring, default nullThe AWS Availability Zone in which to create the file system. Used to create a file system that uses One Zone storage classes
• bypass_policy_lockout_safety_checkbool, default nullA flag to indicate whether to bypass the aws_efs_file_system_policy lockout safety check. Defaults to false
• createbool, default trueDetermines whether resources will be created (affects all resources)
• create_backup_policybool, default trueDetermines whether a backup policy is created
• create_replication_configurationbool, default falseDetermines whether a replication configuration is created
• create_security_groupbool, default trueDetermines whether a security group is created
• creation_tokenstring, default nullA unique name (a maximum of 64 characters are allowed) used as reference when creating the Elastic File System to ensure idempotent file system creation. By default generated by Terraform
• deny_nonsecure_transportbool, default trueDetermines whether aws:SecureTransport is required when connecting to elastic file system
• deny_nonsecure_transport_via_mount_targetbool, default trueDetermines whether to use the common policy option for denying nonsecure transport which allows all AWS principals when accessed via EFS mounted target
• enable_backup_policybool, default trueDetermines whether a backup policy is ENABLED or DISABLED
• lifecycle_policyobject({...}), default {}A file system [lifecycle policy](https://docs.aws.amazon.com/efs/latest/ug/API_LifecyclePolicy.html) object
• mount_targetsmap({...}), default {}A map of mount target definitions to create
• namestring, default ""The name of the file system
• override_policy_documentslist(string), default []List of IAM policy documents that are merged together into the exported document. In merging, statements with non-blank sids will override statements with the same sid
• performance_modestring, default nullThe file system performance mode. Can be either generalPurpose or maxIO. Default is generalPurpose
• policy_statementsmap({...}), default nullA list of IAM policy [statements](https://registry.terraform.io/providers/hashicorp/aws/latest/docs/data-sources/iam_policy_document#statement) for custom permission usage
• protectionobject({...}), default nullA map of file protection configurations
• provisioned_throughput_in_mibpsnumber, default nullThe throughput, measured in MiB/s, that you want to provision for the file system. Only applicable with throughput_mode set to provisioned
• regionstring, default nullRegion where this resource will be managed. Defaults to the Region set in the provider configuration
• replication_configuration_destinationobject({...}), default nullA destination configuration block
• security_group_descriptionstring, default nullSecurity group description. Defaults to Managed by Terraform
• security_group_egress_rulesmap({...}), default {}Map of security group egress rules to add to the security group created
• security_group_ingress_rulesmap({...}), default {}Map of security group ingress rules to add to the security group created
• security_group_namestring, default nullName to assign to the security group. If omitted, Terraform will assign a random, unique name
• security_group_use_name_prefixbool, default falseDetermines whether to use a name prefix for the security group. If true, the security_group_name value will be used as a prefix
• security_group_vpc_idstring, default nullThe VPC ID where the security group will be created
• source_policy_documentslist(string), default []List of IAM policy documents that are merged together into the exported document. Statements must have unique sids
• tagsmap(string), default {}A map of tags to add to all resources
• throughput_modestring, default nullThroughput mode for the file system. Defaults to bursting. Valid values: bursting, elastic, and provisioned. When using provisioned, also set provisioned_throughput_in_mibps