All checks

Medium ECS · regional

ECS Task Definitions should use in-transit encryption for EFS volumes

Flags Amazon ECS task definitions whose EFS volume configurations do not enable in-transit encryption. Without TLS, EFS traffic between the task and the file system traverses the VPC unencrypted.

service: ECS
severity: Medium
scope: evaluated in every region

How to fix it

Enable in-transit encryption on every EFS volume in every ECS task definition.

Open the Amazon ECS console and choose Task definitions.
Open the latest active revision and choose Create new revision.
For each EFS volume, set Transit encryption to ENABLED.
Save the new revision and deploy it.

See which of your accounts this check is failing on.

Book a demo