Ensure automated backup using EFS Backup policy is enabled for AWS Elastic File System (EFS)

MEDIUM

Description

AWS EFS file systems do not automated backup enabled. This may compromise security and affect the availability of data.

Remediation

In AWS Console -

  1. Sign in to the AWS Console and go to the AWS EFS console.
  2. On the File systems page, choose the file system for which to enable automatic backups. The File system details page is displayed.
  3. In general tab, choose Edit.
  4. Select Enable automatic backups and save.

In terraform -

  1. Create 'aws_efs_backup_policy' resource and set 'file_system_id' to the corresponding EFS.
  2. Set 'backup.status' to 'ENABLED'.

References:
https://docs.aws.amazon.com/efs/latest/ug/efs-backup-solutions.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/efs_backup_policy

Policy Details

Rule Reference ID: AC_AWS_0393
CSP: AWS
Remediation Available: Yes
Domain: Resilience
Resource Category: Storage

Frameworks