Control: Compute instance legacy metadata service endpoint should be disabled
The instance metadata service (IMDS) provides information about a running instance, including a variety of details about the instance, its attached virtual network interface cards (VNICs), its attached multipath-enabled volume attachments, and any custom metadata that you define. IMDS also provides information to cloud-init that you can use for various system initialization tasks. To increase the security of metadata requests, it is strongly recommended to update all applications to use the IMDS version 2 endpoint, if supported by the image. Then, disable requests to IMDS version 1.
Run the control in your terminal:
steampipe check terraform_oci_compliance.control.compute_instance_metadata_service_disabled
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_oci_compliance.control.compute_instance_metadata_service_disabled
This control uses a named query:compute_instance_metadata_service_disabled