All checks

Medium EFS · regional

Elastic File System should be configured to encrypt file data at-rest using AWS KMS

Verifies that Amazon EFS file systems are configured to encrypt data at rest using AWS KMS.

service: EFS
severity: Medium
scope: evaluated in every region

How to fix it

To encrypt a new Amazon EFS file system, see Encrypting data at rest in the Amazon Elastic File System User Guide.

Go to the Amazon EFS console.
Create a new file system or modify an existing one.
Enable encryption and specify the AWS KMS key.

See which of your accounts this check is failing on.

Book a demo