EFS volumes in manual backup plan does not satisfy Security Hub EFS.2 rule

Question

We have EFS volumes that are part of a manually created AWS Backup Plan. Yet, Security Hub mark my volumes as non compliant to "EFS.2 Amazon EFS volumes should be in backup plans". The same situation works for RDS as it find the backup plan and shows the snapshot in the RDS console.

Is there something we did wrong when adding the EFS ressources to the backup plan or Is it just a missing feature?

Answer

If you have enabled automatic EFS backups using the method described in this document, there should be no problem.  
https://docs.aws.amazon.com/securityhub/latest/userguide/efs-controls.html#efs-2

By the way, how did you activate the backup?

Answer

We do not use the automatic EFS backup functionality, we backup our EFS volumes in a backup plan directly in the AWS Backup service. This way all EFS/RDS resources of an application are grouped in the same plan.

EFS volumes in manual backup plan does not satisfy Security Hub EFS.2 rule

Relevanter Inhalt