(aws-ecs) - attaching an EFS filesystem should default transit encryption to enabled

[justin8]

We describe the CDK as encoding best practices by default and providing sane defaults. Yet EFS does some, less than sane things by default:

• Encryption is disabled by default
• To allow access a security group needs to be made and the NFS port opened up, there should be a helper method to make this easier
• (sort of an ECS issue more than EFS, but...) When attaching an EFS filesystem to an ECS service the default is transit encryption disabled

Reproduction Steps

What did you expect to happen?

What actually happened?

Environment

• CLI Version : 1.71.0
• Framework Version: 1.71.0
• Node.js Version:
• OS :
• Language (Version):

Other

---

This is 🐛 Bug Report