PAM-CM-0056: NFS mount operation unsuccessful - AWS EFS

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Not able to mount the AWS - EFS as NFS in CA PAM. Error message is "PAM-CM-0056: NFS mount operation unsuccessful"

Environment

All supported CA PAM versions.

Cause

This error occurs when the users try to mount the EFS as NFS with an IAM role assigned to the EFS.

Resolution

Currently, as of CA PAM 4.3. the mount command used does not have the options to make use of the "iam:roles".

As per AWS documentation: The amazon-efs-utils package needs to install for being able to make use of the "iam:roles" option and this is not possible in the CA PAM environment. Installation of third party utilities or updates to the OS files is not allowed.

To mount the EFS as NFS for session recording, the mount will be successful only if the IAM roles assigned are removed and then mount the NFS.