search

int128 / terraform-aws-nat-instance

Terraform module to provision a NAT Instance using an Auto Scaling Group and Spot Instance from $1/month
https://registry.terraform.io/modules/int128/nat-instance/aws/
Apache License 2.0
175 stars 90 forks source link

Security/Compliance fix - require IMDSv2 on NAT instance (#48) #55

Closed mackenzie-oa closed 1 year ago

mackenzie-oa commented 1 year ago

Follow security best practices by disabling IMDSv1 on the Launch Template.

This will help anyone using this module who is required to meet compliance and/or security requirements that flag this feature.

https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/ https://aquasecurity.github.io/tfsec/v1.8.0/checks/aws/autoscaling/enforce-http-token-imds/

mackenzie-oa commented 1 year ago

Perfect, can you bump the terraform module version so I can use the terraform registry? Thanks again for merging my PR @int128 👍