Control: AWS > EC2 > Account Attributes > Instance Metadata Service Defaults

Instance metadata is data about your instance that you can use to configure or manage the running instance. Instance metadata is divided into categories, for example, host name, events, and security groups.

Instance metadata can be accessed from a running instance using one of the following methods:

* Instance Metadata Service Version 1 (IMDSv1) – a request/response method

* Instance Metadata Service Version 2 (IMDSv2) – a session-oriented method

By default, you can use either IMDSv1 or IMDSv2, or both. However, the instance metadata service can be specifically configured to use IMDSv2 on each instance. When you specify that IMDSv2 must be used, IMDSv1 no longer works.

Resource Types

This control targets the following resource types:

AWS > EC2 > Account Attributes

Policies

The following policies can be used to configure this control:

AWS > EC2 > Account Attributes > Instance Metadata Service Defaults

This control type relies on these other policies when running actions:

AWS > EC2 > Account Attributes > Instance Metadata Service Defaults > HTTP Token Hop Limit

Permissions

Cloud permissions used by this control and its actions:

ec2:ModifyInstanceMetadataDefaults

In Your Workspace

Developers

Control Type URI

tmod:@turbot/aws-ec2#/control/types/ec2AccountAttributesInstanceMetadataServiceDefaults

Category URI

tmod:@turbot/turbot#/control/categories/resourceDataProtection

GraphQL

query controlType(id: "tmod:@turbot/aws-ec2#/control/types/ec2AccountAttributesInstanceMetadataServiceDefaults") { … }

query controls(filter: "controlTypeId:'tmod:@turbot/aws-ec2#/control/types/ec2AccountAttributesInstanceMetadataServiceDefaults'") { … }

CLI

Get Controls

turbot graphql controls --filter "controlTypeId:tmod:@turbot/aws-ec2#/control/types/ec2AccountAttributesInstanceMetadataServiceDefaults"