Back to All Checks
Medium ECS Regional

ECS Task Definitions should use in-transit encryption for EFS volumes

Description

Flags Amazon ECS task definitions whose EFS volume configurations do not enable in-transit encryption. Without TLS, EFS traffic between the task and the file system traverses the VPC unencrypted.

Remediation

Enable in-transit encryption on every EFS volume in every ECS task definition.

Steps

  1. Open the Amazon ECS console and choose Task definitions.
  2. Open the latest active revision and choose Create new revision.
  3. For each EFS volume, set Transit encryption to ENABLED.
  4. Save the new revision and deploy it.
Start Your Free Security Check