All checks
Medium
EFS file systems should be encrypted at rest
Confirms that EFS file systems encrypt stored data at rest with AWS KMS.
- service
- EFS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
To enable encryption for your EFS file system, you need to create a new encrypted file system and migrate your data, as encryption cannot be enabled on existing file systems.
- Navigate to the Amazon EFS console
- Create a new file system with encryption enabled
- Configure the encryption settings using AWS KMS
- Migrate your data from the unencrypted file system to the new encrypted one
- Update your applications to use the new encrypted file system
- Delete the old unencrypted file system once migration is complete
See which of your accounts this check is failing on.
Book a demo