title: Security concern using EFS file system with EKS in a multi tenant Kubernetes cluster
body: <p>We are currently building a multi-tenant cluster in EKS. For our persistent storage, we are using the Amazon EFS CSI driver <a href="https://docs.aws.amazon.com/eks/latest/userguide/efs-csi.html" rel="nofollow noreferrer">https://docs.aws.amazon.com/eks/latest/userguide/efs-csi.html</a>.</p>
  <p>We are trying to use a single EFS with a different folder for each PV.</p>
  <p>The issue we are facing is the security group needs to be applied at the node group level, so right now any pod with high enough privilege can just mount the EFS drive and delete anything on it.</p>
  <p>Is there any way to resolve this security issue?</p>