Amazon Elastic File System (EFS) is a serverless file system that does not require provisioning or managing storage. Stored files can be automatically encrypted by the service. In the case that adversaries gain physical access to the storage medium or otherwise leak a message they are not able to access the data.
There is a risk if you answered yes to any of those questions.
It’s recommended to encrypt EFS file systems that contain sensitive information. Encryption and decryption are handled transparently by EFS, so no further modifications to the application are necessary.
For aws_efs_file_system:
resource "aws_efs_file_system" "fs" { # Sensitive, encryption disabled by default
}
For aws_efs_file_system:
resource "aws_efs_file_system" "fs" {
encrypted = true
}