Security/Compliance fix - require IMDSv2 on NAT instance (#48) (#55)

int128 · Nov 24, 2022 · 1c8ffeb · 1c8ffeb
1 parent 8120df9
commit 1c8ffeb
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/main.tf b/main.tf
@@ -73,6 +73,11 @@ resource "aws_launch_template" "this" {
     arn = aws_iam_instance_profile.this.arn
   }
 
+  metadata_options {
+    http_endpoint = "enabled"
+    http_tokens   = "required"
+  }
+
   network_interfaces {
     associate_public_ip_address = true
     security_groups             = [aws_security_group.this.id]