Enable transit encryption

src/index.ts

@@ -3,10 +3,10 @@ import { RemovalPolicy } from 'aws-cdk-lib';
 import * as ec2 from 'aws-cdk-lib/aws-ec2';
 import * as ecs from 'aws-cdk-lib/aws-ecs';
 import * as efs from 'aws-cdk-lib/aws-efs';
-import { PolicyStatement } from 'aws-cdk-lib/aws-iam';
 import { Construct } from 'constructs';
 import * as shutdown from './auto_shutdown';
 import { DiscordBotConstruct } from './discord';
+import { PolicyStatement } from 'aws-cdk-lib/aws-iam';
 
 const DEFAULT_VCPU = 2048;
 const DEFAULT_MEMORY = 8192;
@@ -182,10 +182,11 @@ export class GameServer extends Construct {
       name: 'efsVolume',
       efsVolumeConfiguration: {
         fileSystemId: fs.fileSystemId,
-        authorizationConfig: {
+        transitEncryption: 'ENABLED',
+        authorizationConfig:{
           accessPointId: ap.accessPointId,
-          iam: 'ENABLED',
-        },
+          iam: 'ENABLED'
+        }
       },
     });
 
@@ -195,10 +196,10 @@ export class GameServer extends Construct {
           'elasticfilesystem:ClientRootAccess',
           'elasticfilesystem:ClientWrite',
           'elasticfilesystem:ClientMount',
-          'elasticfilesystem:DescribeMountTargets',
+          'elasticfilesystem:DescribeMountTargets'
         ],
-        resources: [fs.fileSystemArn],
-      }),
+        resources: [fs.fileSystemArn]
+      })
     );
 
     /**