Description

EFS data should be encrypted at rest using AWS KMS (Key Management Service) in order to reduce the risk of a data breach via direct access to the storage device. It was detected that the EFS file system {AwsEfsFileSystem.Name} is not encrypted.

• 

  Recommended Mitigation

  It is recommended to enable data at rest encryption. For more details please see https://docs.aws.amazon.com/efs/latest/ug/encryption-at-rest.html