Check Details

• Resource: EFS File System
• Check: Enable EFS storage backup
• Risk: Data loss due to missing or outdated backups

Remediation via AWS Console

1. Log in to the AWS Management Console and open the Amazon EFS console.

   
2. Select the EFS file system where backup is not enabled and click Edit (top-right corner).

3. In the Automatic backups section, check Enable automatic backups.

   
4. Click Save.

Remediation via AWS CLI

1. Log in to the AWS Management Console and click the CloudShell icon (>_) in the top-right corner.

   

2. Identify the EFS file system ID:

   

   aws efs describe-file-systems \
   --query "FileSystems[*].FileSystemId" \
   --output table
   

3. Enable automatic backups for the file system:

   

   aws efs put-backup-policy \
   --file-system-id <file-system-id> \
   --backup-policy Status=ENABLED
   

4. Verify the backup configuration:

   

   aws efs describe-file-systems \
   --file-system-id <file-system-id> \
   --query "FileSystems[*].BackupPolicy"
   

5. Confirm the output shows:

   

   {
   "Status": "ENABLED"
   }