EFS Encryption

Last edited 163 days ago by Kirtan Chavda

EFS offers the ability to encrypt data at rest and in transit.

Encryption keys are managed by the AWS Key Management Service (KMS).

Encryption in transit:

Data encryption in transit uses Transport Layer Security (TLS) 1.2 to encrypt data sent between your clients and EFS file systems.

Encryption in transit is enabled when mounting the file system.

Encryption at rest:

Enable encryption at rest in the EFS console or by using the AWS CLI or SDKs.

Encryption at rest MUST be enabled at file system creation time.

Data encrypted at rest is transparently encrypted while being written, and transparently decrypted while being read.

Encryption of data at rest and of data in transit can be configured together or separately.

Want to print your doc?
This is not the way.

Try clicking the ⋯ next to your doc name or using a keyboard shortcut (

CtrlP

) instead.