Query: Auto Scaling group should configure EC2 instances to require Instance Metadata Service Version 2 (IMDSv2)

Description

This control checks whether IMDSv2 is enabled on all instances launched by AWS EC2 Auto Scaling groups. The control fails if the Instance Metadata Service (IMDS) version is not included in the launch configuration or if both IMDSv1 and IMDSv2 are enabled.

Query

Tables used in this query:

• aws_ec2_launch_configuration

Controls using this query:

• 3 Auto Scaling group should configure EC2 instances to require Instance Metadata Service Version 2 (IMDSv2)
• Auto Scaling group should configure EC2 instances to require Instance Metadata Service Version 2 (IMDSv2)

SQL