Security posture waste check
Unencrypted EFS Filesystem
unencrypted_efs_filesystem
What it finds
Unencrypted EFS Filesystem: one of the Security posture checks in the security & compliance group. Checks in this group look for: configuration gaps on resources you pay for: missing encryption, missing deletion protection, public exposure, uncovered backups.
Why it costs money
These are posture findings first. Some also carry a cost, such as a resource nobody backs up or protects properly, and the report labels which is which.
How it is detected
EFS filesystem without encryption at rest
Detection confidence: HIGH. This is the criterion from our public docs. It runs in a local scan with your own read-only credentials.
AWS's own tools
AWS flags this too, under "EFS.1 / EFS.8 EFS file systems should be encrypted at rest".
Checked against the AWS documentation.
Run it yourself
Nothing leaves your machine. The local scan has no telemetry.