Is encrypted enforced for HIPAA Omnibus Rule 2013?

Yes, Because sensitive data can exist and to help protect data at rest, ensure encryption is enabled for your AWS Elastic File System (EFS).

Is kms_key_arn enforced for HIPAA Omnibus Rule 2013?

Yes, Ensure AWS Elastic File Systems (AWS EFS) are encrypted using CMK. The rule is non-compliant if the EFS File System is not encrypted using CMK.

2 controls from HIPAA Omnibus Rule 2013 apply to this module.

Control	Clause	Change
EFS file systems should have encryption at rest enabledefs_file_system_encrypt_data_at_rest 164.308(a)(1)(ii)(B)	164.308(a)(1)(ii)(B)
EFS file systems should be encrypted with CMKefs_file_system_encrypted_with_cmk 164.308(a)(1)(ii)(B)	164.308(a)(1)(ii)(B)