Enable At Rest Encryption | Vulnerability Database

EFS Encryption has not been enabled

If your organization is subject to corporate or regulatory policies that require encryption of data and metadata at rest, we recommend creating a file system that is encrypted at rest, and mounting your file system using encryption of data in transit.

Impact

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

Enable encryption for EFS

1
2
3
4
5


Resources:
  GoodExample:
    Type: AWS::EFS::FileSystem
    Properties:
      Encrypted: true

Remediation Links

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-filesystem.html#cfn-efs-filesystem-encrypted

Enable encryption for EFS

1
2
3
4


resource "aws_efs_file_system" "good_example" {
  name      = "bar"
  encrypted = true
}

Remediation Links

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/efs_file_system