Learn more about Amazon Elastic File System at amzn.to/2wLw2aJ.
Amazon Elastic File System (EFS) now allows you to encrypt your data at rest using keys managed through AWS Key Management Service (KMS). Encryption and decryption are handled seamlessly, so you don’t have to modify your applications to access your data.
When you create a new file system, you can choose to enable encryption via the AWS Management Console or API. To encrypt your data, you can use the default EFS key automatically created in your account or a key you generated.
Encryption at rest is available at no additional cost in all Amazon EFS regions.