EFS volumes in ECS task definitions do not have encryption in transit enabled misconfiguration detec

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_97
Category - Subcategory	Storage - Encryption
Provider	AWS
Severity	HIGH
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

This check examines ECS tasks, and checks the definitions for EFS and if attached that the transit is encrypted.

How to Fix

Resource: AWS::ECS::TaskDefinition

• Arguments: Properties.Volumes.EFSVolumeConfiguration.TransitEncryption.EFSVolumeConfiguration needs to ENABLED if there is an attached EFS. [source,go]

---

Resources: TaskDefinition: Type: AWS::ECS::TaskDefinition Properties: ... Volumes:

• ... EFSVolumeConfiguration: ...
• TransitEncryption: "ENABLED"

---