1. 在CloudFormation模板中定义EFS访问点

EfsAccessPoint:
  Type: AWS::EFS::AccessPoint
  Properties:
    FileSystemId: !Ref EfsFileSystem
    PosixUser:
      Gid: 1000
      Uid: 1000
    RootDirectory:
      CreationInfo:
        OwnerGid: 1000
        OwnerUid: 1000
        Permissions: 0755
      Path: /access1

2. 将Fargate任务添加到VPC并授予EFS访问点的权限

TaskExecutionRole:
  Type: AWS::IAM::Role
  Properties:
    AssumeRolePolicyDocument:
      Version: '2012-10-17'
      Statement:
      - Effect: Allow
        Principal:
          Service:
          - ecs-tasks.amazonaws.com
        Action:
        - sts:AssumeRole
    ManagedPolicyArns:
    - arn:aws:iam::aws:policy/service-role/AmazonECSTaskExecutionRolePolicy

TaskDefinition:
  Type: AWS::ECS::TaskDefinition
  Properties: 
    Family: MyTaskDefinition
    RequiresCompatibilities:
      - FARGATE
    ContainerDefinitions: 
    ExecutionRoleArn: !GetAtt TaskExecutionRole.Arn
    TaskRoleArn: !Ref TaskRole

Vpc:
  Type: AWS::EC2::VPC
  Properties:
    CidrBlock: 10.0.0.0/16
    EnableDnsSupport: true
    EnableDnsHostnames: true
    Tags:
    - Key: Name
      Value: VPC

Subnet:
  Type: AWS::EC2::Subnet
  Properties:
    CidrBlock: 10.0.1.0/24
    VpcId: !Ref Vpc
    Tags:
    - Key: Name
      Value: Subnet

SecurityGroup:
  Type: AWS::EC2::SecurityGroup
  Properties:
    GroupDescription: Security group for ECS tasks
    VpcId: !Ref Vpc