All checks
Medium EFS · regional

EFS file systems should have automatic backups enabled

Checks that automatic backups are on for the EFS file system, so AWS Backup backs it up daily under the default EFS backup plan, which keeps each backup for 35 days unless you change it, and files lost to deletion, corruption or a failure can be restored.

service
EFS
severity
Medium
scope
evaluated in every region

How to fix it

  • Affects another check: Automatic backups also pass EFS.2 for this file system, with no AWS Backup plan assignment of your own.

In the console

EFS → File systems → the file system → General → Edit

Enable automatic backups
Selected

With the AWS CLI

aws efs put-backup-policy --file-system-id <file-system-id> --backup-policy Status=ENABLED --region <region>

With Terraform

resource "aws_efs_backup_policy" "this" {
  file_system_id = var.file_system_id

  backup_policy {
    status = "ENABLED"
  }
}

See which of your accounts this check is failing on.

Book a live scan