EFS file systems should have automatic backups enabled
Checks that automatic backups are on for the EFS file system, so AWS Backup backs it up daily under the default EFS backup plan, which keeps each backup for 35 days unless you change it, and files lost to deletion, corruption or a failure can be restored.
- service
- EFS
- severity
- Medium
- scope
- evaluated in every region
How to fix it
- Affects another check: Automatic backups also pass EFS.2 for this file system, with no AWS Backup plan assignment of your own.
In the console
EFS → File systems → the file system → General → Edit
- Enable automatic backups
- Selected
With the AWS CLI
aws efs put-backup-policy --file-system-id <file-system-id> --backup-policy Status=ENABLED --region <region>With Terraform
resource "aws_efs_backup_policy" "this" {
file_system_id = var.file_system_id
backup_policy {
status = "ENABLED"
}
}
See which of your accounts this check is failing on.
Book a live scan