turbot/terraform_oci_compliance

Control: Compute instance legacy metadata service endpoint should be disabled

Description

The instance metadata service (IMDS) provides information about a running instance, including a variety of details about the instance, its attached virtual network interface cards (VNICs), its attached multipath-enabled volume attachments, and any custom metadata that you define. IMDS also provides information to cloud-init that you can use for various system initialization tasks. To increase the security of metadata requests, it is strongly recommended to update all applications to use the IMDS version 2 endpoint, if supported by the image. Then, disable requests to IMDS version 1.

Usage

Run the control in your terminal:

powerpipe control run terraform_oci_compliance.control.compute_instance_metadata_service_disabled

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run terraform_oci_compliance.control.compute_instance_metadata_service_disabled --share

SQL

This control uses a named query:

compute_instance_metadata_service_disabled

Tags