Elastic File System

AWS EFS provides shared file storage, with risks related to access control, data exposure, and insecure mounting across environments.

EFS enables shared file access across instances. Without strict permissions and network controls, it can expose sensitive data across systems. Proper segmentation and access management are essential.

Elastic File System Documentation

EFS Mounted Without Encryption at Rest
critical
aws efs

EFS Mounted Without Encryption at Rest

EFS file systems should be configured to encrypt data at rest to create a permissions barrier to accessing and copying the data, thereby reducing the impact of leaked raw data.
EFS Allows Insecure Connections
critical
aws efs

EFS Allows Insecure Connections

EFS allows for insecure mounts, leaving communications between host machines and remote file systems unencrypted.