EFS file system should have encryption at rest enabled

What it checks

EFS file system: encryption at rest is not enabled.

Where it applies

Terraform: aws_efs_file_system

CloudFormation: AWS::EFS::FileSystem

How to fix it

1. Set encrypted = true at EFS creation. For existing unencrypted EFS: create a new encrypted file system, mount both, copy data with DataSync, update mount targets.

Frameworks

• AWS FSBP EFS.1
• SOC 2 CC6.1
• HIPAA 164.312(a)(2)(iv)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules