search

SummitRoute / imdsv2_wall_of_shame

List of vendors that do not allow IMDSv2 enforcement
141 stars 9 forks source link

Add Cloudformation? #9

Open 0xdabbad00 opened 2 years ago

0xdabbad00 commented 2 years ago

https://github.com/aws-cloudformation/cloudformation-coverage-roadmap/issues/655

If we're going to hold AWS accountable, we might as well hold them accountable for all the things. There is a work-around for this issue using Launch Templates. but it's frustrating this isn't part of the EC2 resource directly.

shanman190 commented 2 years ago

I think Amazon should be held to the same standard. Special care would need to be taken for CloudFormation resources though since, from my understanding, those are the responsibility of the service providing team(s). In this case the EC2 service team(s).

Maybe a nested bulleted list?

EDIT: it appears that you can now use a launch template in conjunction with the AWS::EC2::Instance resource, so this may be satisfied? Source: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2-instance-launchtemplate