diff --git a/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/query.rego b/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/query.rego
index 8541ffb6f39..f7246c594f8 100644
--- a/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/query.rego
+++ b/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/query.rego
@@ -51,8 +51,12 @@ CxPolicy[result] {
 	}
 }
 
+# Missing efs_volume_configuration only matters when the task may use host/EC2
+# volumes that should be EFS-backed. Fargate tasks use platform-managed local
+# storage for plain volume blocks, so requiring EFS transit encryption is an FP.
 CxPolicy[result] {
 	resource := input.document[i].resource.aws_ecs_task_definition[name]
+	not is_fargate_task(resource)
 	vol_info := get_volumes(resource)[_]
 	not common_lib.valid_key(vol_info.volume, "efs_volume_configuration")
 
@@ -71,6 +75,10 @@ CxPolicy[result] {
 	}
 }
 
+is_fargate_task(resource) {
+	resource.requires_compatibilities[_] == "FARGATE"
+}
+
 get_volumes(resource) = volumes {
 	is_array(resource.volume)
 	volumes := [{"volume": vol, "index": idx} | vol := resource.volume[idx]]
diff --git a/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/negative3.tf b/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/negative3.tf
new file mode 100644
index 00000000000..046b42d754e
--- /dev/null
+++ b/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/negative3.tf
@@ -0,0 +1,12 @@
+resource "aws_ecs_task_definition" "fargate_local" {
+  family                   = "service"
+  requires_compatibilities = ["FARGATE"]
+  network_mode             = "awsvpc"
+  cpu                      = 256
+  memory                   = 512
+  container_definitions    = file("task-definitions/service.json")
+
+  volume {
+    name = "local-storage"
+  }
+}
diff --git a/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/negative4.tf b/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/negative4.tf
new file mode 100644
index 00000000000..8666fb043ad
--- /dev/null
+++ b/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/negative4.tf
@@ -0,0 +1,16 @@
+resource "aws_ecs_task_definition" "fargate_multi_local" {
+  family                   = "service"
+  requires_compatibilities = ["FARGATE"]
+  network_mode             = "awsvpc"
+  cpu                      = 256
+  memory                   = 512
+  container_definitions    = file("task-definitions/service.json")
+
+  volume {
+    name = "local-storage-1"
+  }
+
+  volume {
+    name = "local-storage-2"
+  }
+}
diff --git a/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/positive8.tf b/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/positive8.tf
new file mode 100644
index 00000000000..9b66771a007
--- /dev/null
+++ b/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/positive8.tf
@@ -0,0 +1,19 @@
+resource "aws_ecs_task_definition" "fargate_efs_disabled" {
+  family                   = "service"
+  requires_compatibilities = ["FARGATE"]
+  network_mode             = "awsvpc"
+  cpu                      = 256
+  memory                   = 512
+  container_definitions    = file("task-definitions/service.json")
+
+  volume {
+    name = "efs-storage"
+
+    efs_volume_configuration {
+      file_system_id          = aws_efs_file_system.fs.id
+      root_directory          = "/opt/data"
+      transit_encryption      = "DISABLED"
+      transit_encryption_port = 2999
+    }
+  }
+}
diff --git a/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/positive_expected_result.json b/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/positive_expected_result.json
index 562e3a327a2..314557f7093 100644
--- a/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/positive_expected_result.json
+++ b/assets/queries/terraform/aws/efs_volume_with_disabled_transit_encryption/test/positive_expected_result.json
@@ -58,5 +58,11 @@
     "severity": "MEDIUM",
     "line": 26,
     "filename": "positive7.tf"
+  },
+  {
+    "queryName": "EFS Volume With Disabled Transit Encryption",
+    "severity": "MEDIUM",
+    "line": 15,
+    "filename": "positive8.tf"
   }
 ]