Severity Framework
Snyk CCSS
Rule category
Data / Best Practices
Is your enviroment affected by this misconfiguration?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applicationsFrameworks
CIS-Controls
CSA-CCM
GDPR
HIPAA
ISO-27001
NIST-800-53
PCI-DSS
SOC-2
- Snyk ID SNYK-CC-00270
- credit Snyk Research Team
Description
Data between ECS host and EFS server is not encrypted in transit.
How to fix?
Set volume.efs_volume_configuration.transit_encryption attribute to ENABLED.
Example Configuration
resource "aws_ecs_task_definition" "allowed" {
family = "service"
container_definitions = var.container_def
volume {
name = "service-storage"
efs_volume_configuration {
file_system_id = "test"
root_directory = "/opt/data"
transit_encryption = "ENABLED"
transit_encryption_port = 2999
authorization_config {
access_point_id = "test"
iam = "ENABLED"
}
}
}
}