diff --git a/prowler/providers/aws/services/ec2/ec2_ebs_volume_protected_by_backup_plan/__init__.py b/prowler/providers/aws/services/ec2/ec2_ebs_volume_protected_by_backup_plan/__init__.py
new file mode 100644
index 0000000000..e69de29bb2
diff --git a/prowler/providers/aws/services/ec2/ec2_ebs_volume_protected_by_backup_plan/ec2_ebs_volume_protected_by_backup_plan.metadata.json b/prowler/providers/aws/services/ec2/ec2_ebs_volume_protected_by_backup_plan/ec2_ebs_volume_protected_by_backup_plan.metadata.json
new file mode 100644
index 0000000000..692fe40849
--- /dev/null
+++ b/prowler/providers/aws/services/ec2/ec2_ebs_volume_protected_by_backup_plan/ec2_ebs_volume_protected_by_backup_plan.metadata.json
@@ -0,0 +1,34 @@
+{
+  "Provider": "aws",
+  "CheckID": "ec2_ebs_volume_protected_by_backup_plan",
+  "CheckTitle": "Amazon EBS volumes should be protected by a backup plan.",
+  "CheckType": [
+    "Software and Configuration Checks, AWS Security Best Practices"
+  ],
+  "ServiceName": "ec2",
+  "SubServiceName": "",
+  "ResourceIdTemplate": "arn:partition:service:region:account-id:volume/volume-id",
+  "Severity": "low",
+  "ResourceType": "AwsEc2Volume",
+  "Description": "Evaluates if an Amazon EBS volume in in-use state is covered by a backup plan. The check fails if an EBS volume isn't covered by a backup plan. If you set the backupVaultLockCheck parameter equal to true, the control passes only if the EBS volume is backed up in an AWS Backup locked vault.",
+  "Risk": "Without backup coverage, Amazon EBS volumes are vulnerable to data loss or deletion, reducing the resilience of your systems and making recovery from incidents more difficult.",
+  "RelatedUrl": "https://docs.aws.amazon.com/config/latest/developerguide/ebs-resources-protected-by-backup-plan.html",
+  "Remediation": {
+    "Code": {
+      "CLI": "",
+      "NativeIaC": "",
+      "Other": "https://docs.aws.amazon.com/securityhub/latest/userguide/ec2-controls.html#ec2-28",
+      "Terraform": ""
+    },
+    "Recommendation": {
+      "Text": "Ensure that all in-use Amazon EBS volumes are included in a backup plan, and consider using AWS Backup Vault Lock for additional protection.",
+      "Url": "https://docs.aws.amazon.com/aws-backup/latest/devguide/assigning-resources.html"
+    }
+  },
+  "Categories": [
+    "redundancy"
+  ],
+  "DependsOn": [],
+  "RelatedTo": [],
+  "Notes": ""
+}
diff --git a/prowler/providers/aws/services/ec2/ec2_ebs_volume_protected_by_backup_plan/ec2_ebs_volume_protected_by_backup_plan.py b/prowler/providers/aws/services/ec2/ec2_ebs_volume_protected_by_backup_plan/ec2_ebs_volume_protected_by_backup_plan.py
new file mode 100644
index 0000000000..9847238f54
--- /dev/null
+++ b/prowler/providers/aws/services/ec2/ec2_ebs_volume_protected_by_backup_plan/ec2_ebs_volume_protected_by_backup_plan.py
@@ -0,0 +1,27 @@
+from prowler.lib.check.models import Check, Check_Report_AWS
+from prowler.providers.aws.services.backup.backup_client import backup_client
+from prowler.providers.aws.services.ec2.ec2_client import ec2_client
+
+
+class ec2_ebs_volume_protected_by_backup_plan(Check):
+    def execute(self):
+        findings = []
+        for volume in ec2_client.volumes:
+            report = Check_Report_AWS(self.metadata())
+            report.region = volume.region
+            report.resource_id = volume.id
+            report.resource_arn = volume.arn
+            report.resource_tags = volume.tags
+            if volume.arn in backup_client.protected_resources:
+                report.status = "PASS"
+                report.status_extended = (
+                    f"EBS Volume {volume.id} is protected by a backup plan."
+                )
+            else:
+                report.status = "FAIL"
+                report.status_extended = (
+                    f"EBS Volume {volume.id} is not protected by a backup plan."
+                )
+            findings.append(report)
+
+        return findings
diff --git a/tests/providers/aws/services/ec2/ec2_ebs_volume_protected_by_backup_plan/ec2_ebs_volume_protected_by_backup_plan_test.py b/tests/providers/aws/services/ec2/ec2_ebs_volume_protected_by_backup_plan/ec2_ebs_volume_protected_by_backup_plan_test.py
new file mode 100644
index 0000000000..f9f3873967
--- /dev/null
+++ b/tests/providers/aws/services/ec2/ec2_ebs_volume_protected_by_backup_plan/ec2_ebs_volume_protected_by_backup_plan_test.py
@@ -0,0 +1,230 @@
+from unittest import mock
+
+import botocore
+from boto3 import client
+from moto import mock_aws
+
+from tests.providers.aws.utils import (
+    AWS_ACCOUNT_NUMBER,
+    AWS_REGION_US_EAST_1,
+    set_mocked_aws_provider,
+)
+
+make_api_call = botocore.client.BaseClient._make_api_call
+
+
+def mock_make_api_call(self, operation_name, kwarg):
+    if operation_name == "CreateBackupSelection":
+        return {
+            "SelectionName": "test-backup-selection",
+            "IamRoleArn": "arn:aws:iam::123456789012:role/backup-role",
+            "Resources": [
+                f"arn:aws:ec2:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:volume/volume-tester",
+            ],
+        }
+    elif operation_name == "ListProtectedResources":
+        return {
+            "Results": [
+                {
+                    "ResourceArn": f"arn:aws:ec2:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:volume/volume-tester",
+                    "ResourceType": "EC2",
+                    "LastBackupTime": "2023-08-23T00:00:00Z",
+                }
+            ]
+        }
+    elif operation_name == "ListBackupPlans":
+        return {
+            "BackupPlans": [
+                {
+                    "BackupPlanId": "test-backup-plan-id",
+                    "BackupPlanName": "test-backup-plan",
+                }
+            ]
+        }
+    elif operation_name == "DescribeVolumes":
+        return {
+            "Volumes": [
+                {
+                    "VolumeId": "volume-tester",
+                    "Encrypted": True,
+                }
+            ]
+        }
+    return make_api_call(self, operation_name, kwarg)
+
+
+class Test_ec2_ebs_volume_protected_by_backup_plan:
+    @mock_aws
+    def test_ec2_no_instances(self):
+        from prowler.providers.aws.services.backup.backup_service import Backup
+        from prowler.providers.aws.services.ec2.ec2_service import EC2
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+
+        with mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ):
+            with mock.patch(
+                "prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan.ec2_client",
+                new=EC2(aws_provider),
+            ), mock.patch(
+                "prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan.backup_client",
+                new=Backup(aws_provider),
+            ):
+                # Test Check
+                from prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan import (
+                    ec2_ebs_volume_protected_by_backup_plan,
+                )
+
+                check = ec2_ebs_volume_protected_by_backup_plan()
+                result = check.execute()
+
+                assert len(result) == 0
+
+    @mock_aws
+    def test_ec2_ebs_volume_no_backup_plans(self):
+        ec2_client = client("ec2", region_name=AWS_REGION_US_EAST_1)
+        volume = ec2_client.create_volume(
+            AvailabilityZone="us-east-1a", Size=10, VolumeType="gp2"
+        )
+
+        from prowler.providers.aws.services.backup.backup_service import Backup
+        from prowler.providers.aws.services.ec2.ec2_service import EC2
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+
+        with mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ):
+            with mock.patch(
+                "prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan.ec2_client",
+                new=EC2(aws_provider),
+            ), mock.patch(
+                "prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan.backup_client",
+                new=Backup(aws_provider),
+            ):
+                # Test Check
+                from prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan import (
+                    ec2_ebs_volume_protected_by_backup_plan,
+                )
+
+                check = ec2_ebs_volume_protected_by_backup_plan()
+                result = check.execute()
+
+                assert len(result) == 1
+                assert result[0].status == "FAIL"
+                assert (
+                    result[0].status_extended
+                    == f"EBS Volume {volume['VolumeId']} is not protected by a backup plan."
+                )
+                assert result[0].resource_id == volume["VolumeId"]
+                assert result[0].region == AWS_REGION_US_EAST_1
+                assert (
+                    result[0].resource_arn
+                    == f"arn:aws:ec2:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:volume/{volume['VolumeId']}"
+                )
+                assert result[0].resource_tags is None
+
+    @mock_aws
+    def test_ec2_ebs_volume_without_backup_plan(self):
+        ec2_client = client("ec2", region_name=AWS_REGION_US_EAST_1)
+        backup_client = client("backup", region_name=AWS_REGION_US_EAST_1)
+        volume = ec2_client.create_volume(
+            AvailabilityZone="us-east-1a", Size=10, VolumeType="gp2"
+        )
+        backup_client.create_backup_plan(
+            BackupPlan={
+                "BackupPlanName": "test-backup-plan",
+                "Rules": [
+                    {
+                        "RuleName": "DailyBackup",
+                        "TargetBackupVaultName": "test-vault",
+                        "ScheduleExpression": "cron(0 12 * * ? *)",
+                        "Lifecycle": {"DeleteAfterDays": 30},
+                        "RecoveryPointTags": {
+                            "Type": "Daily",
+                        },
+                    },
+                ],
+            }
+        )
+
+        from prowler.providers.aws.services.backup.backup_service import Backup
+        from prowler.providers.aws.services.ec2.ec2_service import EC2
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+
+        with mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ):
+            with mock.patch(
+                "prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan.ec2_client",
+                new=EC2(aws_provider),
+            ), mock.patch(
+                "prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan.backup_client",
+                new=Backup(aws_provider),
+            ):
+                # Test Check
+                from prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan import (
+                    ec2_ebs_volume_protected_by_backup_plan,
+                )
+
+                check = ec2_ebs_volume_protected_by_backup_plan()
+                result = check.execute()
+
+                assert len(result) == 1
+                assert result[0].status == "FAIL"
+                assert (
+                    result[0].status_extended
+                    == f"EBS Volume {volume['VolumeId']} is not protected by a backup plan."
+                )
+                assert result[0].resource_id == volume["VolumeId"]
+                assert result[0].region == AWS_REGION_US_EAST_1
+                assert (
+                    result[0].resource_arn
+                    == f"arn:aws:ec2:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:volume/{volume['VolumeId']}"
+                )
+                assert result[0].resource_tags is None
+
+    @mock.patch("botocore.client.BaseClient._make_api_call", new=mock_make_api_call)
+    def test_ec2_instance_with_backup_plan(self):
+        from prowler.providers.aws.services.backup.backup_service import Backup
+        from prowler.providers.aws.services.ec2.ec2_service import EC2
+
+        aws_provider = set_mocked_aws_provider([AWS_REGION_US_EAST_1])
+
+        with mock.patch(
+            "prowler.providers.common.provider.Provider.get_global_provider",
+            return_value=aws_provider,
+        ):
+            with mock.patch(
+                "prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan.ec2_client",
+                new=EC2(aws_provider),
+            ), mock.patch(
+                "prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan.backup_client",
+                new=Backup(aws_provider),
+            ):
+                # Test Check
+                from prowler.providers.aws.services.ec2.ec2_ebs_volume_protected_by_backup_plan.ec2_ebs_volume_protected_by_backup_plan import (
+                    ec2_ebs_volume_protected_by_backup_plan,
+                )
+
+                check = ec2_ebs_volume_protected_by_backup_plan()
+                result = check.execute()
+
+                assert len(result) == 1
+                assert result[0].status == "PASS"
+                assert (
+                    result[0].status_extended
+                    == "EBS Volume volume-tester is protected by a backup plan."
+                )
+                assert result[0].resource_id == "volume-tester"
+                assert result[0].region == AWS_REGION_US_EAST_1
+                assert (
+                    result[0].resource_arn
+                    == f"arn:aws:ec2:{AWS_REGION_US_EAST_1}:{AWS_ACCOUNT_NUMBER}:volume/volume-tester"
+                )
+                assert result[0].resource_tags is None