Skip to content

Commit 16166b2

Browse files
author
Lenox Hsu
committed
Merge branch 'fix/efs-enforce-tls-policy' into 'develop'
fix: modify efs policy to enforce encryption in-transit See merge request mwvaughn/aws-hpc-recipes!148
2 parents 8f01169 + b2a5b3e commit 16166b2

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

recipes/storage/efs_simple/assets/main.yaml

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -80,6 +80,14 @@ Resources:
8080
Condition:
8181
Bool:
8282
'elasticfilesystem:AccessedViaMountTarget': 'true'
83+
- Sid: efs-enforce-tls
84+
Effect: Deny
85+
Principal:
86+
AWS: '*'
87+
Action: '*'
88+
Condition:
89+
Bool:
90+
'aws:SecureTransport': 'false'
8391
BackupPolicy:
8492
Status: !Ref AutomaticBackups
8593
Encrypted: true

0 commit comments

Comments
 (0)