Description

Amazon Elastic File System (Amazon EFS) provides a simple, serverless, set-and-forget elastic file system for use with AWS Cloud services and on-premises resources. EFS is encrypted using the default AWS-managed KMS key. It is recommended that Amazon Elastic File System is configured to encrypt file data using AWS CMK.

• 

  Recommended Mitigation

  It is recommended to use CMK encryption. For more details please see https://docs.aws.amazon.com/efs/latest/ug/managing-encrypt.html.