ECS task definition EFS volume has transit encryption disabled

What it checks

ECS task definition EFS volume has transit encryption disabled

Where it applies

Terraform: aws_ecs_task_definition

CloudFormation: AWS::ECS::TaskDefinition

How to fix it

1. Set transit_encryption = "ENABLED" on every efs_volume_configuration. It is required anyway when the mount uses an EFS access point or IAM authorization.

Frameworks

• SOC 2 CC6.7
• HIPAA 164.312(e)(1)
• AWS FSBP ECS.18

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules