turbot/aws_compliance

Control: 2 Amazon EFS volumes should be in backup plans

Description

This control checks whether Amazon Elastic File System (Amazon EFS) file systems are added to the backup plans in AWS Backup. The control fails if Amazon EFS file systems are not included in the backup plans.

Including EFS file systems in the backup plans helps you to protect your data from deletion and data loss.

Remediation

To remediate this issue, update your file system to enable automatic backups.

To enable automatic backups for an existing file system

  1. Open the Amazon Elastic File System console.
  2. On the File systems page, choose the file system for which to enable automatic backups. The File system details page is displayed.
  3. Under General, choose Edit.
  4. To enable automatic backups, select Enable automatic backups.
  5. Choose Save changes.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_efs_2

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_efs_2 --share

SQL

This control uses a named query:

efs_file_system_in_backup_plan

Tags