Query: Compute instance legacy metadata service endpoint should be disabled

Description

The instance metadata service (IMDS) provides information about a running instance, including a variety of details about the instance, its attached virtual network interface cards (VNICs), its attached multipath-enabled volume attachments, and any custom metadata that you define. IMDS also provides information to cloud-init that you can use for various system initialization tasks. To increase the security of metadata requests, it is strongly recommended to update all applications to use the IMDS version 2 endpoint, if supported by the image. Then, disable requests to IMDS version 1.

Query

Tables used in this query:

• terraform_resource

Controls using this query:

• Compute instance legacy metadata service endpoint should be disabled

SQL