Other Articles

EFS – Enable EFS Storage Backup

This check ensures that automatic backups are enabled for Amazon EFS file systems. Enabling backups helps protect data from accidental deletion, corruption, or unexpected failures.

Check Details

  • Resource: EFS File System
  • Check: Enable EFS storage backup
  • Risk: Data loss due to missing or outdated backups

Remediation via AWS Console

  1. Log in to the AWS Management Console and open the Amazon EFS console. Amazon EFS Console
  2. Select the EFS file system where backup is not enabled and click Edit (top-right corner).
  3. In the Automatic backups section, check Enable automatic backups. Enable EFS automatic backups
  4. Click Save.

Remediation via AWS CLI

  1. Log in to the AWS Management Console and click the CloudShell icon (>_) in the top-right corner. AWS CloudShell
  2. Identify the EFS file system ID: 
    

aws efs describe-file-systems \
 --query "FileSystems[*].FileSystemId" \
 --output table
  3. Enable automatic backups for the file system: 
    

aws efs put-backup-policy \
 --file-system-id <file-system-id> \
 --backup-policy Status=ENABLED
  4. Verify the backup configuration: 
    

aws efs describe-file-systems \
 --file-system-id <file-system-id> \
 --query "FileSystems[*].BackupPolicy"

Confirm the output shows: 



{
"Status": "ENABLED"
}