EFS data should be encrypted at rest

Description

This control evaluates whether Amazon EFS is set up to encrypt file data at rest through AWS KMS.

It is recommended to utilize encrypted file systems. This is supported by Amazon EFS and can be enabled during the creation of a file system.

Remediation

To learn how to enable encryption for a new Amazon EFS file system, consult the Encrypting Data at Rest section in the Amazon EFS User Guide.