Enable At Rest Encryption | Vulnerability Database

EFS Encryption has not been enabled

If your organization is subject to corporate or regulatory policies that require encryption of data and metadata at rest, we recommend creating a file system that is encrypted at rest, and mounting your file system using encryption of data in transit.

Impact

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

Enable encryption for EFS

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11


Resources:
  GoodExample:
    Type: AWS::EFS::FileSystem
    Properties:
      BackupPolicy:
        Status: ENABLED
      Encrypted: true
      LifecyclePolicies:
        - TransitionToIA: AFTER_60_DAYS
      PerformanceMode: generalPurpose
      ThroughputMode: bursting

Enable encryption for EFS

1
2
3
4
5


resource "aws_efs_file_system" "good_example" {
  name       = "bar"
  encrypted  = true
  kms_key_id = "my_kms_key"
}

Remediation Links

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/efs_file_system