Amazon offers encryption of data at rest and in transit for EFS file systems
Data encryption and decryption at rest is transparently done during write and read operations and you need not to modify your applications. Data encryption in transit uses standard Transport Layer Security to encrypt data sent between EFS file systems and your client. Encryption of data at rest and in transit can be configured separately or together meet your security requirements. . The keys are managed by the AWS KMS service.
Want to Learn AWS, check out this AWS Course by Intellipaat.