UPD: added IMDSv2 requirement

2023-06-15 15:37:13 +08:00 · 2023-06-15 15:37:13 +08:00 · b26b80218f
commit b26b80218f
parent c53a27ee5f
1 changed files with 6 additions and 0 deletions
--- a/modules/compute/ec2/main.tf
+++ b/modules/compute/ec2/main.tf
@ -22,6 +22,12 @@ resource "aws_instance" "ec2-instance" {
  volume_tags = merge(var.additional_tags, var.default-tags,
    { Name = var.instance-name }
  )
+  # IMDSv2 requirement
+  metadata_options {
+    http_endpoint               = "enabled"
+    http_tokens                 = "required"
+    http_put_response_hop_limit = 2
+  }
 }

 resource "aws_ebs_volume" "data-volumes" {