DataDog / managed-kubernetes-auditing-toolkit

All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.
Apache License 2.0
319 stars 18 forks source link

Enhance IMDS access detection to support cases where IMDSv2 is enforced (closes #8) #9

Closed christophetd closed 1 year ago

christophetd commented 1 year ago

Before:

Now:

Sample result on an EKS cluster that has IMDSv2 enforced (but not blocked through a NetworkPolicy or response-max-hop=1)

image
christophetd commented 1 year ago

Yep I added the timeout after testing and seeing that it hangs. Thanks for the review!