Guimove / terraform-aws-bastion

Terraform module which creates SSH bastion infrastructure on AWS
https://registry.terraform.io/modules/Guimove/bastion/aws
Apache License 2.0
205 stars 186 forks source link

Unable To Set "Instance Metadata Service Version 2" #146

Closed Tohmua closed 1 year ago

Tohmua commented 2 years ago

The EC2 instance is using version 1 of the Instance Metadata Service, which is prone to publicly known weaknesses.

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/instance

Setting: http_tokens to required as part of the launch_template can solve this.

Guimove commented 1 year ago

Fixed in #147